Skip to content

Commit e08c868

Browse files
committedApr 27, 2021
11.0.0
1 parent 0672aad commit e08c868

File tree

3 files changed

+8
-4
lines changed

3 files changed

+8
-4
lines changed
 

‎CHANGES.md

+6-2
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,10 @@
22

33
## not yet released
44

5+
(nothing yet)
6+
7+
## 11.0.0
8+
59
- **Backward incompatible** and **security-related** change to parsing the
610
`-d DELIM` option. ([#148](https://github.com/trentm/json/issues/148))
711

@@ -23,8 +27,8 @@
2327
Before this change, that parsing used `eval()`, which allowed for unintended
2428
code execution if an untrusted argument to `-d` was provided. The fix for
2529
this vulnerability changes to use `JSON.parse()` to support escapes. However
26-
that results in a backward incompatible change, because the set
27-
[JSON escapes](https://tools.ietf.org/html/rfc7159#section-7) is a subset of
30+
that results in a backward incompatible change, because the set of
31+
[JSON escapes](https://tools.ietf.org/html/rfc7159#section-7) is a *subset* of
2832
[JavaScript escapes](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String#escape_notation).
2933

3034
The only escape I expect that would affect any current user would be the

‎lib/json.js

+1-1
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
* See <https://github.com/trentm/json> and <https://trentm.com/json/>
99
*/
1010

11-
var VERSION = '10.0.0';
11+
var VERSION = '11.0.0';
1212

1313
var p = console.warn;
1414
var util = require('util');

‎package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"name": "json",
33
"description": "a 'json' command for massaging and processing JSON on the command line",
4-
"version": "10.0.0",
4+
"version": "11.0.0",
55
"repository": {
66
"type": "git",
77
"url": "git://github.com/trentm/json.git"

0 commit comments

Comments
 (0)
Please sign in to comment.