Security Fix: Remove unnecessary fast-xml-parser override (backport #9095) [release/4.11.x] (#9098)

Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Gytis Cepkauskas <98940208+GytisCepk@users.noreply.github.com>

Author: 3 people

common/config/rush/pnpm-config.json

@@ -13,7 +13,6 @@
     "playwright": "~1.56.1", // https://github.com/advisories/GHSA-7mvr-c777-76hp @itwin/oidc-signin-tool>@playwright/test
     "qs": "^6.14.1", // http://github.com/advisories/GHSA-6rw7-vpxm-498p @itwin/certa>express>qs
     "browserslist": "latest", // https://github.com/browserslist/update-db#readme
-    "fast-xml-parser": "^5.3.6", // https://github.com/advisories/GHSA-jmr7-xgp7-cmfj @google-cloud/storage > fast-xml-parser
     "minimatch@<3.1.4": "^3.1.4", // https://github.com/advisories/GHSA-7r86-cg39-jmmj and https://github.com/advisories/GHSA-23c5-xmqv-rm74
     "minimatch@>=5.0.0 <5.1.8": "^5.1.8", // https://github.com/advisories/GHSA-7r86-cg39-jmmj and https://github.com/advisories/GHSA-23c5-xmqv-rm74
     "minimatch@>=9.0.0 <9.0.7": "^9.0.7", // https://github.com/advisories/GHSA-7r86-cg39-jmmj and https://github.com/advisories/GHSA-23c5-xmqv-rm74
@@ -43,4 +42,4 @@
       }
     }
   }
-}
+}

common/config/rush/pnpm-lock.yaml

@@ -59,7 +59,7 @@
     "fast-sort": "^3.0.2",
     "mocha": "^10.2.0",
     "rimraf": "^3.0.2",
-    "fast-xml-parser": "^5.3.6",
+    "fast-xml-parser": "^5.5.6",
     "global-jsdom": "^26.0.0",
     "internal-tools": "workspace:*",
     "prettier": "^3.2.5",
@@ -110,4 +110,4 @@
       "./lib/**/*.test.js"
     ]
   }
-}
+}

full-stack-tests/presentation/package.json

@@ -5,7 +5,7 @@
 import path from "path";
 import sanitize from "sanitize-filename";
 import { IModelDb, IModelJsFs, SnapshotDb } from "@itwin/core-backend";
-import { GuidString, Id64String } from "@itwin/core-bentley";
+import { assert, GuidString, Id64String } from "@itwin/core-bentley";
 import {
   BisCodeSpec,
   CategoryProps,
@@ -67,7 +67,11 @@ export function importSchema(mochaContext: Mocha.Context, imodel: { importSchema
   const parsedSchema = new XMLParser({
     ignoreAttributes: false,
     attributeNamePrefix: "",
-    isArray: (_, jpath) => jpath.startsWith("ECSchema."),
+    jPath: true,
+    isArray: (_, jpath) => {
+      assert(typeof jpath === "string");
+      return jpath.startsWith("ECSchema.");
+    },
   }).parse(schemaXml);
   const schemaItems = Object.values(parsedSchema.ECSchema)
     .flatMap<any>((itemDef) => itemDef)