From 2d9cc13567be263494e7b6a543f9a9de3117353d Mon Sep 17 00:00:00 2001 From: Alex Richter Date: Tue, 17 Mar 2020 14:51:57 -0400 Subject: [PATCH 1/3] Enhances HTML escaping. --- src/index.js | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/index.js b/src/index.js index 824a5fe..591be6b 100644 --- a/src/index.js +++ b/src/index.js @@ -6,6 +6,8 @@ const RIGHT = '-->'; const ENCODE = [ ['&', '&'], ['>', '>'], + ['<', '<'], + ['/', '/'], ]; const DATA_KEY = 'hypernova-key'; From a29f81b48b06b30680fa6aab90868eb88d49dd84 Mon Sep 17 00:00:00 2001 From: Alex Richter Date: Wed, 18 Mar 2020 15:35:54 -0400 Subject: [PATCH 2/3] Modifies test to accomodate changes to escaping. --- test/escape-test.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/escape-test.js b/test/escape-test.js index a856983..3fe326a 100644 --- a/test/escape-test.js +++ b/test/escape-test.js @@ -7,7 +7,7 @@ describe('escaping', () => { it('escapes', () => { const html = serialize('foo', '', { foo: '', bar: '>' }); - assert.include(html, ' Date: Tue, 24 Mar 2020 10:32:32 -0400 Subject: [PATCH 3/3] Adds publishConfig --- package.json | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index a54e944..5fb4c48 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,10 @@ { - "name": "hypernova", + "name": "@shopify/hypernova", "version": "2.5.0", "description": "A service for server-side rendering your JavaScript views", + "publishConfig": { + "access": "restricted" + }, "main": "lib/index.js", "scripts": { "prepublish": "not-in-publish || safe-publish-latest && npm run build",