Marius

multiplexing channels

1

are you planning to implement channels to which one can un-/subscribe similar to "rooms"? or is it that setting up multiple sockjs-routes will do just that? i need some way...

The `noNestedTags` seems to be used for tree-construction but also subsets the list of tags changing the context of the parser to either [RCData or RAWText](https://html.spec.whatwg.org/#parsing-html-fragments), both of which seem...

allowing style attribute is not safe

1

CSS can be harmful and must be sanitized w/ e.g. [cssfilter](https://github.com/leizongmin/js-css-filter). It is not a safe default setting to allow the `style` attribute. https://github.com/acrazing/html5parser/blob/cc95ffc4b50d99e64a477eb34934113f2d0ca3c4/src/safeHtml.ts#L95

The list of self-closing tags is incomplete. I'd suggest to use https://github.com/wooorm/html-void-elements as a basis and extend it w/ the special tag-names for comments and doctypes. https://github.com/acrazing/html5parser/blob/cc95ffc4b50d99e64a477eb34934113f2d0ca3c4/src/config.ts#L19

useOutsideClick capture phase

2

I was surprised to find that `useOutsideClick` registers its listeners for the `capture` phase of the event (which makes things harder in my specific use-case). It would've been helpful to...

regex lastIndex

5

the regex `lastIndex` bug seems to persist although _es5shim_ is included. ``` js var empty = '' var re = /.*/g re.exec(empty) re.lastIndex === 0 // false in IE6 ```...

jest-enzyme: docs: installing jest-enzyme and its type defs

1

Hello, the readme currently has two split sections on installing jest-enzyme: one at the top for general import and another at the bottom for cra and ts specifics. I'd like...

Hi, I found that `.toHaveStyleRule` does not match if the rule is a child of a `@media` rule and the enzyme element wrapper does not have a so called "static...

do/would you provide _modernizr_ or _hasjs_ tests **also** covering the date parse safari bug for conditional inclusion?

xss injection

2

Hi, The `getFallbackHTML` method does not escape the json for html [here](https://github.com/wayfair/hypernova-php/blob/20ec9052a230eb91dff9f5421d67ea23010f166e/src/Renderer.php#L226). It should escape the json before sprintf-ing it into html tags just like its js counterpart [here](https://github.com/airbnb/hypernova/blob/0971f5d16ca17ef33342c5a710b1cdedb8036b5a/src/index.js#L22). I'd...