v1.2.0 Release Notes
LATESTReleased October 16, 2025
🎉 Major Release: Tables, Includes & Enterprise Security
v1.2.0 introduces two major features (@table and @include), achieves Security Grade A+, and includes comprehensive refactoring with 85-91% code reduction.
New Features
@table Blocks
Markdown-style tables with captions, alignment, and styling options.
- Familiar pipe syntax from Markdown
- Optional captions for context
- Three built-in styles: bordered, striped, minimal
- Per-column alignment (left, center, right)
- Automatic HTML escaping for XSS protection
- Round-trip serialization support
@include Directive
Modular document composition with file includes.
- Compose documents from multiple files
- Recursive includes (up to 10 levels)
- Circular reference detection
- Path traversal protection (enterprise security)
- Relative path resolution
- Clean error messages for missing files
Security: Grade A+
Security Improvements
Comprehensive security overhaul achieves enterprise-grade protection.
- Path traversal protection
- ReDoS prevention
- Strict input validation
- Defense-in-depth architecture
- XSS protection (enhanced)
- 19 security tests
Path Traversal Protection
Prevents directory escape attacks (../../../../etc/passwd). Validates all include paths to ensure they stay within the base directory.
ReDoS Prevention
Uses bounded regex quantifiers (\s{0,20} instead of \s*) to prevent catastrophic backtracking and denial-of-service attacks.
Strict Validation
Table column counts, alignment values, and number parsing all strictly validated with helpful error messages.
Code Quality
Refactoring
- • Parser: 904 → 173 lines (81% reduction)
- • CLI: 1,147 → 172 lines (85% reduction)
- • Highly modular: 46 focused files
- • All files under 300 lines
Type Safety
- • Zero 'any' types
- • Strict TypeScript mode
- • exactOptionalPropertyTypes enabled
- • Full type coverage
Testing
Test Breakdown
- Parser: 83 tests (parsing, serialization, @table, @include)
- CLI: 47 tests (commands, rendering, formatting)
- Converters: 73 tests (PDF, DOCX, PPTX, XLSX)
- Security: 19 dedicated security tests
Published Packages
omniscript-parser
Zero-dependency TypeScript parser
omniscript-cli
Command-line tools
omniscript-converters
PDF, DOCX, PPTX, XLSX converters
✅ 100% Backward Compatible
Zero breaking changes. All v1.1 documents work without modification.