Update xmldom to 0.7.0

The package is now scoped under @xmldom. See xmldom/xmldom#278 This fixes security vulnerability CVE-2021-32796
node-saml · Aug 19, 2021 · 892aca2 · 892aca2
1 parent 5cec595
commit 892aca2
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 7 deletions.
diff --git a/lib/signed-xml.js b/lib/signed-xml.js
@@ -1,5 +1,5 @@
 var xpath = require('xpath')
-  , Dom = require('xmldom').DOMParser
+  , Dom = require('@xmldom/xmldom').DOMParser
   , utils = require('./utils')
   , c14n = require('./c14n-canonicalization')
   , execC14n = require('./exclusive-canonicalization')

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -10,7 +10,7 @@
     "LoneRifle <LoneRifle@users.noreply.github.com>"
   ],
   "dependencies": {
-    "xmldom": "^0.6.0",
+    "@xmldom/xmldom": "^0.7.0",
     "xpath": "0.0.32"
   },
   "devDependencies": {