File tree Expand file tree Collapse file tree 3 files changed +8
-4
lines changed
Expand file tree Collapse file tree 3 files changed +8
-4
lines changed Original file line number Diff line number Diff line change 22
33## not yet released
44
5+ (nothing yet)
6+
7+ ## 11.0.0
8+
59- ** Backward incompatible** and ** security-related** change to parsing the
610 ` -d DELIM ` option. ([ #148 ] ( https://github.com/trentm/json/issues/148 ) )
711
2327 Before this change, that parsing used ` eval() ` , which allowed for unintended
2428 code execution if an untrusted argument to ` -d ` was provided. The fix for
2529 this vulnerability changes to use ` JSON.parse() ` to support escapes. However
26- that results in a backward incompatible change, because the set
27- [ JSON escapes] ( https://tools.ietf.org/html/rfc7159#section-7 ) is a subset of
30+ that results in a backward incompatible change, because the set of
31+ [ JSON escapes] ( https://tools.ietf.org/html/rfc7159#section-7 ) is a * subset* of
2832 [ JavaScript escapes] ( https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String#escape_notation ) .
2933
3034 The only escape I expect that would affect any current user would be the
Original file line number Diff line number Diff line change 88 * See <https://github.com/trentm/json> and <https://trentm.com/json/>
99 */
1010
11- var VERSION = '10 .0.0' ;
11+ var VERSION = '11 .0.0' ;
1212
1313var p = console . warn ;
1414var util = require ( 'util' ) ;
Original file line number Diff line number Diff line change 11{
22 "name" : " json" ,
33 "description" : " a 'json' command for massaging and processing JSON on the command line" ,
4- "version" : " 10 .0.0" ,
4+ "version" : " 11 .0.0" ,
55 "repository" : {
66 "type" : " git" ,
77 "url" : " git://github.com/trentm/json.git"
You can’t perform that action at this time.
0 commit comments