Repository navigation
fix: preserve selector delimiters after escaped backslashes - #354
Conversation
* origin/main: feat: support the case-sensitive attribute flag (s) per Selectors Level 4 (postcss#327) fix: escape values assigned to an id through the value setter (postcss#326) fix: escape class values supplied to the constructor (postcss#349) fix: preserve the spaces declared on selector and root containers (postcss#356) fix: forward the default options given to the parser factory (postcss#345) 7.1.8 fix: remove four more quadratic paths from selector parsing # Conflicts: # src/parser.js
|
I merged current Your
Tell me if you would rather resolve it yourself and I will drop my merge commit. |
* origin/main: fix: preserve selector delimiters after escaped backslashes (postcss#354) fix: keep the processor's entry points usable when destructured feat: support the case-sensitive attribute flag (s) per Selectors Level 4 (postcss#327) fix: escape values assigned to an id through the value setter (postcss#326) fix: escape class values supplied to the constructor (postcss#349) fix: preserve the spaces declared on selector and root containers (postcss#356) fix: forward the default options given to the parser factory (postcss#345) 7.1.8 fix: remove four more quadratic paths from selector parsing chore(deps): bump tinypool and oxfmt (postcss#351) 7.1.7 docs: add CVE-2026-104844 to the 7.1.6 changelog entry fix: keep whitespace around the namespace separator in attribute selectors (postcss#339) fix: invalidate stale raw spelling on combinator value assignment (postcss#342) fix: set parents for all variadic inserted nodes (postcss#343) Consume whitespace after hexadecimal CSS escapes (postcss#340) fix: lossless mode drops whitespace when a selector ends empty (postcss#337) chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 (postcss#347) 7.1.6 fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability # Conflicts: # src/parser.js
When a class name ends in an escaped backslash, a following
.or#starts a new selector node.splitWord()currently treats every delimiter immediately preceded by a backslash as escaped and merges the nodes.Count consecutive backslashes before the delimiter so an even number leaves it active and an odd number still escapes it. The regression tests exercise both delimiters, escaped delimiters after a backslash, and lossless round trips.
The two new delimiter cases fail on the unmodified parser.
npm testpassed all 905 tests on Node.js 24, including the coverage thresholds.