fast-xml-parser

What's Changed

• add support for endIndex in node metadata (5.x edition) by @Wain-PC in #850
• fix: don't crash on a closing tag with no matching opening tag by @hdimer in #861

New Contributors

• @Wain-PC made their first contribution in #850
• @hdimer made their first contribution in #861

Full Changelog: v5.10.1...v5.11.0

Full Changelog: v5.10.0...v5.10.1

What's Changed

• Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #849
• Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #848

Full Changelog: v5.9.3...v5.10.0

What's Changed

• Harden GitHub Actions workflows by @martincostello in #841
• GitHub Actions workflow fixes by @martincostello in #844

New Contributors

• @martincostello made their first contribution in #841

Full Changelog: v5.9.2...v5.9.3

Full Changelog: v5.9.1...v5.9.2

Full Changelog: v5.9.0...v5.9.1

• update strnum to 2.3.0
  • you can set hex, binary, enotation, infinity, unicode
• validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.

• integrate xml-naming to validate DOCTYPE entity name and notation name (using qname because of backward compatibility)
  • This will consider xml-version as well. '1.0' is default
• update strnum to 2.3.0
  • You can set octal and binary parsing which is by deault off
• update fast-xml-builder to 1.2.0
  • can sanitize tag names if found invalid
  • fix format output

• fix: alwaysCreateTextNode should create text node when attributes are present for self closing node
• fix stop node expression when ns prefix is removed (found by iruizsalinas)
• update XML Builder to 1.1.7
• mark addEntity deprecated

• allow numerical external entity for backward compatibility
• fix #705: attributesGroupName working with preserveOrder
• fix #817: stackoverflow when tag expression is very long

• Use @nodable/entities v2.1.0
  • breaking changes
    • single entity scan. You're not allowed to use entity value to form another entity name.
    • you cant add numeric external entity
    • entity error message when expantion limit is crossed might change
  • typings are updated for new options related to process entity
  • please follow documentation of @nodable/entities for more detail.
  • performance
    • if processEntities is false, then there should not be impact on performance.
    • if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%
    • if processEntities is true, and you pass entity decoder separately
      • if no entity then performance should be same as before
      • if there are entities then performance should be increased from past versions
  • ignoreAttributes is not required to be set to set xml version for NCR entity value
• update 'fast-xml-builder' to sanitize malicious CDATA and comment's content

• No API change
• No change in performance for basic usage
• No typing change
• No config change
• new dependency
• breaking: error messages for entities might have been changed.

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.12...v5.6.0

• increase default entity explansion limit as many projects demand for that

maxEntitySize: 10000,
maxExpansionDepth: 10000,
maxTotalExpansions: Infinity,
maxExpandedLength: 100000,
maxEntityCount: 1000,

• performance improvement
  • reduce calls to toString
  • early return when entities are not present
  • prepare rawAttrsForMatcher only if user sets jPath: false

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.9...v5.5.10

combine typings file to avoid configuration changes pass readonly instance of matcher to the call backs to avoid accidental push/pop call

fix: entity expansion limits update strnum package to 2.2.0

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.5...v5.5.6

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.3...v5.5.5

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.1...v5.5.2

• support path-expression-matcher
• fix: stopNode should not be parsed
• performance improvement for stopNode checking

XML Builder was the part of fast-xml-parser for years. But considering that any bug in builder may false-alarm the users who are only using parser and vice-versa, we have decided to split it into a separate package.

Migration

To migrate to fast-xml-builder;

From

import { XMLBuilder } from "fast-xml-parser";

To

import  XMLBuilder  from "fast-xml-builder";

XMLBuilder will be removed from current package in any next major version of this library. So better to migrate.

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.9...v5.3.9

• support maxNestedTags
• handle non-array input for XML builder when preserveOrder is true (By Angelo Coetzee)
• save use of js properies Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.7...v5.3.8

What's Changed

• Unexport X2jOptions at declaration site by @Drarig29 in https://github.com/NaturalIntelligence/fast-xml-parser/pull/787

New Contributors

• @Drarig29 made their first contribution in https://github.com/NaturalIntelligence/fast-xml-parser/pull/787

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.6...v5.3.7

• Improve security and performance of entity processing
  • new options maxEntitySize, maxExpansionDepth, maxTotalExpansions, maxExpandedLength, allowedTags,tagFilter
  • fast return when no edtity is present
  • improvement replacement logic to reduce number of calls

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.5...v5.3.6

What's Changed

• Add missing exports to fxp commonjs types by @jeremymeng in https://github.com/NaturalIntelligence/fast-xml-parser/pull/782
• fix: Escape regex char in entity name
• update strnum to 2.1.2

New Contributors

• @jeremymeng made their first contribution in https://github.com/NaturalIntelligence/fast-xml-parser/pull/782

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.4...v5.3.5

• fix #775: transformTagName with allowBooleanAttributes adds an unnecessary attribute
• Performance improvement for stopNodes (By Maciek Lamberski)

• Launched Separate CLI module
• Replace Buffer with Uint8Array

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.2.4...v5.2.4

• Support ESM modules
• fix value parsing issues
• a feature to access tag location is added (metadata)
• fix to read DOCTYPE correctly

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md

• Multiple minor fixes provided in the validator and parser
• v6 is added for experimental use.
• ignoreAttributes support function, and array of string or regex
• Add support for parsing HTML numeric entities
• v5 of the application is ESM module now. However, JS is also supported

Note: Release section in not updated frequently. Please check CHANGELOG or Tags for latest release information.