fix: Bump and remove @xmldom/xmldom (input validation issue) (#2582)

visgl · Aug 9, 2023 · 0a0b7d3 · 0a0b7d3
1 parent 86a1ff4
commit 0a0b7d3
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 16 deletions.
diff --git a/modules/kml/package.json b/modules/kml/package.json
@@ -36,7 +36,7 @@
     "@loaders.gl/loader-utils": "4.0.0-alpha.17",
     "@loaders.gl/schema": "4.0.0-alpha.17",
     "@tmcw/togeojson": "^4.5.0",
-    "@xmldom/xmldom": "^0.7.5"
+    "@xmldom/xmldom": "^0.7.13"
   },
   "gitHead": "c95a4ff72512668a93d9041ce8636bac09333fd5"
 }
diff --git a/modules/wms/package.json b/modules/wms/package.json
@@ -47,8 +47,5 @@
     "deep-strict-equal": "^0.2.0",
     "lerc": "^4.0.1"
   },
-  "devDependencies": {
-    "xmldom": "0.6.0"
-  },
   "gitHead": "c95a4ff72512668a93d9041ce8636bac09333fd5"
 }
diff --git a/modules/xml/package.json b/modules/xml/package.json
@@ -37,8 +37,5 @@
     "@loaders.gl/schema": "4.0.0-alpha.17",
     "fast-xml-parser": "^4.2.5"
   },
-  "devDependencies": {
-    "xmldom": "0.6.0"
-  },
   "gitHead": "c95a4ff72512668a93d9041ce8636bac09333fd5"
 }
diff --git a/yarn.lock b/yarn.lock
@@ -2970,10 +2970,10 @@
     "@webassemblyjs/wast-parser" "1.9.0"
     "@xtuc/long" "4.2.2"
 
-"@xmldom/xmldom@^0.7.5":
-  version "0.7.10"
-  resolved "https://registry.yarnpkg.com/@xmldom/xmldom/-/xmldom-0.7.10.tgz#b1f4a7dc63ac35b2750847644d5dacf5b4ead12f"
-  integrity sha512-hb9QhOg5MGmpVkFcoZ9XJMe1em5gd0e2eqqjK87O1dwULedXsnY/Zg/Ju6lcohA+t6jVkmKpe7I1etqhvdRdrQ==
+"@xmldom/xmldom@^0.7.13":
+  version "0.7.13"
+  resolved "https://registry.yarnpkg.com/@xmldom/xmldom/-/xmldom-0.7.13.tgz#ff34942667a4e19a9f4a0996a76814daac364cf3"
+  integrity sha512-lm2GW5PkosIzccsaZIz7tp8cPADSIlIHWDFTR1N0SzfinhhYgeIQjFMz4rYzanCScr3DqQLeomUDArp6MWKm+g==
 
 "@xtuc/ieee754@^1.2.0":
   version "1.2.0"
@@ -12994,11 +12994,6 @@ xml-utils@^1.0.2:
   resolved "https://registry.yarnpkg.com/xml-utils/-/xml-utils-1.7.0.tgz#333ce391d8918f872aaf98d2cf90f9ef9b82bd0f"
   integrity sha512-bWB489+RQQclC7A9OW8e5BzbT8Tu//jtAOvkYwewFr+Q9T9KDGvfzC1lp0pYPEQPEoPQLDkmxkepSC/2gIAZGw==
 
-xmldom@0.6.0:
-  version "0.6.0"
-  resolved "https://registry.yarnpkg.com/xmldom/-/xmldom-0.6.0.tgz#43a96ecb8beece991cef382c08397d82d4d0c46f"
-  integrity sha512-iAcin401y58LckRZ0TkI4k0VSM1Qg0KGSc3i8rU+xrxe19A/BN1zHyVSJY7uoutVlaTSzYyk/v5AmkewAP7jtg==
-
 xtend@^4.0.0, xtend@~4.0.1:
   version "4.0.2"
   resolved "https://registry.yarnpkg.com/xtend/-/xtend-4.0.2.tgz#bb72779f5fa465186b1f438f674fa347fdb5db54"