diff --git a/index.js b/index.js index 2b8c8ac..7c962d3 100644 --- a/index.js +++ b/index.js @@ -3,7 +3,7 @@ const escapeStringRegexp = require('escape-string-regexp'); const { klona } = require('klona'); const { isPlainObject } = require('is-plain-object'); const deepmerge = require('deepmerge'); -const srcset = require('srcset'); +const parseSrcset = require('parse-srcset'); const { parse: postcssParse } = require('postcss'); const url = require('url'); // Tags that can conceivably represent stand-alone media. @@ -345,7 +345,7 @@ function sanitizeHtml(html, options, _recursing) { } if (a === 'srcset') { try { - parsed = srcset.parse(value); + parsed = parseSrcset(value); parsed.forEach(function(value) { if (naughtyHref('srcset', value.url)) { value.evil = true; diff --git a/package.json b/package.json index 75670c9..7b8bf18 100644 --- a/package.json +++ b/package.json @@ -27,8 +27,8 @@ "htmlparser2": "^4.1.0", "is-plain-object": "^5.0.0", "klona": "^2.0.3", - "postcss": "^8.0.2", - "srcset": "^3.0.0" + "parse-srcset": "^1.0.2", + "postcss": "^8.0.2" }, "devDependencies": { "eslint": "^7.3.1", @@ -41,4 +41,4 @@ "mocha": "^5.2.0", "sinon": "^9.0.2" } -} \ No newline at end of file +}