Hey nprofile1qyt8wumn8ghj7un9d3shjtnyd968gmewwp6kytcqyp4753e60gv6hnlrwqstdj22k7cugp0rzpweerf7y9ca7cjzdzk4yw80lgv (nprofile…0lgv) I started working on a fork of partytime. The codebase and dev setup you created is great! I was able to add the "medium list" types, as a first feature addition.
I am wondering if you have any insight on how upgrading v3 fast-xml-parser to v4 fast-xml-parser would work.
There is a moderate security vulnerability with v3, and I tried upgrading, but apparently the output of the parser is different with v4, and your validation methods are incompatible.
https://github.com/podverse/podverse-partytime/pull/1/files
Mitch Downey :pci:
npub1yf…w6g6v
2025-12-28 08:37:30 UTC
Author Public Key
npub1yfr5d05qj3qzz84kntze3c8accyz0unwczgm0fxuypuqdnenkwuqew6g6vSeen on
wss://relay.ditto.pubPublished at
2025-12-28 08:37:30 UTCEvent JSON
{
"id": "2991c0851f264a071ae8d24cad441bac3a887dc9f867003b16b5cc47e432197d",
"pubkey": "224746be809440211eb69ac598e0fdc60827f26ec091b7a4dc207806cf33b3b8",
"created_at": 1766911050,
"kind": 1,
"tags": [
[
"p",
"6bea473a7a19abcfe37020b6c94ab7b1c405e3105d9c8d3e2171df624268ad52",
"wss://relay.ditto.pub/"
],
[
"p",
"1104a8183106418593debeef7da48a3f7ff59a4afa3fdf887af5b42cdf1258a4",
"wss://relay.ditto.pub/"
],
[
"proxy",
"https://podcastindex.social/users/mitch/statuses/115796282621666383",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub/"
]
],
"content": "Hey nostr:nprofile1qyt8wumn8ghj7un9d3shjtnyd968gmewwp6kytcqyp4753e60gv6hnlrwqstdj22k7cugp0rzpweerf7y9ca7cjzdzk4yw80lgv I started working on a fork of partytime. The codebase and dev setup you created is great! I was able to add the \"medium list\" types, as a first feature addition.\n\nI am wondering if you have any insight on how upgrading v3 fast-xml-parser to v4 fast-xml-parser would work.\n\nThere is a moderate security vulnerability with v3, and I tried upgrading, but apparently the output of the parser is different with v4, and your validation methods are incompatible.\n\nhttps://github.com/podverse/podverse-partytime/pull/1/files",
"sig": "1341b544cb0a56df90a4e89fbb7b55d999d07c98bdf326bc90c772d7a16f92c9797fac78c8be077308bf7dda683b8d57b251b3ec851faf72c0d75ff713052e5c"
}