fix: raise an error on < in attribute values

lddubeau · Jul 6, 2018 · 4fd67a1 · 4fd67a1
1 parent 2964381
commit 4fd67a1
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/lib/saxes.js b/lib/saxes.js
@@ -672,6 +672,9 @@ class SAXParser {
           if (c === "&") {
             this.state = S_ATTRIB_VALUE_ENTITY_Q;
           }
+          else if (c === "<") {
+            this.fail("Invalid character.");
+          }
           else {
             this.attribValue += c;
           }
@@ -712,6 +715,9 @@ class SAXParser {
           if (c === "&") {
             this.state = S_ATTRIB_VALUE_ENTITY_U;
           }
+          else if (c === "<") {
+            this.fail("Invalid character.");
+          }
           else {
             this.attribValue += c;
           }