Skip to content
This repository was archived by the owner on May 26, 2023. It is now read-only.

Update dependency html-loader to v1 (master) #519

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Oct 21, 2022

This PR contains the following updates:

Package Type Update Change
html-loader dependencies major ^0.5.5 -> ^1.0.0

By merging this PR, the issue #518 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2022-37598

Release Notes

webpack-contrib/html-loader

v1.0.0

Compare Source

⚠ BREAKING CHANGES
  • for parsing HTML now we use htmlparser2 package
  • the attrs option was renamed to the attributes option
  • the interpolate option was removed, please consider migration on the preprocessor
  • the minimize option is true by default in production mode. You need to list all options for html-minifier if you use object notation.
  • uppercase tags and uppercase attributes are handled by default
  • the root option was moved under the attributes option, please look at the documentation
  • emit an error on broken HTML syntax when minimization is enabled
  • By default, now we process the following tags with attributes:
    • the src attribute of the audio tag
    • the src attribute of the embed tag
    • the src attribute of the img tag
    • the srcset attribute of the img tag
    • the src attribute of the input tag
    • the href attribute of the link tag (only for stylesheets)
    • the data attribute of the object tag
    • the src attribute of the script tag
    • the src attribute of the source tag
    • the srcset attribute of the source tag
    • the src attribute of the track tag
    • the poster attribute of the video tag
    • the src attribute of the video tag
  • the attributes option should be Boolean or Object, please look at the documentation
  • the exportAsDefault option were removed in favor the esModules option
  • the exportAsEs6Default option were removed in favor the esModules option
Features
  • handle more tags and attributes
  • added the preprocessor option
  • added the esModule option
  • add the rulFilter option for filtering some of urls, please look at the documentation
  • allow to setup how to handle and filter tags and attributes, please look at the documentation
  • improve error reporting
Bug Fixes
  • adding quotes when necessary for unquoted sources
  • do not handle empty attributes
  • escape \u2028 and \u2029 characters
  • handle only valid srcset tags
  • parser tags and attributes according spec
  • reduce import/require count
  • reduce size of generated modules
  • respect #hash in sources
  • support ES6 syntax in script tags when minimize
  • support ES6 import of urls

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Oct 21, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/master-html-loader-1.x branch from aa1ad82 to 10c201c Compare November 11, 2022 04:01
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/master-html-loader-1.x branch from 10c201c to fe72e1f Compare November 20, 2022 17:18
@mend-for-github-com mend-for-github-com bot changed the title Update dependency html-loader to v1 (master) Update dependency html-loader to v1 (master) - autoclosed Mar 27, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/master-html-loader-1.x branch March 27, 2023 17:16
@mend-for-github-com mend-for-github-com bot changed the title Update dependency html-loader to v1 (master) - autoclosed Update dependency html-loader to v1 (master) Mar 31, 2023
@mend-for-github-com mend-for-github-com bot reopened this Mar 31, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/master-html-loader-1.x branch March 31, 2023 05:42
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants