fix: CVE-2021-21366

testem · Mar 15, 2021 · 4e31ec5 · 4e31ec5
1 parent 088dd0f
commit 4e31ec5
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -49,7 +49,7 @@
     "styled_string": "0.0.1",
     "tap-parser": "^7.0.0",
     "tmp": "0.0.33",
-    "xmldom": "^0.1.19"
+    "xmldom": "^0.5.0"
   },
   "files": [
     "lib",

diff --git a/tests/ci/reporter_tests.js b/tests/ci/reporter_tests.js
@@ -768,7 +768,7 @@ describe('test reporters', function() {
       reporter.finish();
       var output = stream.read().toString();
       assert.match(output, /<testsuite name="Testem Tests" tests="1" skipped="0" failures="0" timestamp="(.+)" time="(\d+(\.\d+)?)">/);
-      assert.match(output, /<testcase classname="phantomjs" name="it does &lt;cool> &quot;cool&quot; 'cool' stuff"/);
+      assert.match(output, /<testcase classname="phantomjs" name="it does <cool> &quot;cool&quot; 'cool' stuff" time="0"\/>/);
 
       assertXmlIsValid(output);
     });
@@ -950,7 +950,7 @@ describe('test reporters', function() {
       reporter.finish();
       var output = stream.read().toString();
       assert.match(output, /it failed with quotes"/);
-      assert.match(output, /&lt;it> &quot;crapped&quot; out/);
+      assert.match(output, /<it> &quot;crapped&quot; out/);
 
       assertXmlIsValid(output);
     });