2021-05-06 11:32:55 +08:00
|
|
|
# CHANGELOG
|
|
|
|
|
|
2024-03-03 10:28:40 +08:00
|
|
|
## v1.0.15 (2024-03-03)
|
|
|
|
|
|
2024-03-03 10:31:06 +08:00
|
|
|
- [feat: add `<kbd>` to default whitelist](https://github.com/leizongmin/js-xss/pull/279) by @rayrny
|
2024-03-03 10:28:40 +08:00
|
|
|
- [feat: single-quoted attribute value syntax support](https://github.com/leizongmin/js-xss/pull/287) by @mdk000
|
|
|
|
|
|
2022-08-16 21:54:05 +08:00
|
|
|
## v1.0.14 (2022-08-16)
|
|
|
|
|
|
|
|
|
|
- [fix: problem with not closed tag](https://github.com/leizongmin/js-xss/pull/262) by @slawiko
|
|
|
|
|
- [fix: add allowList to types](https://github.com/leizongmin/js-xss/pull/261) by @metonym
|
|
|
|
|
|
2022-06-07 00:05:03 +08:00
|
|
|
## v1.0.13 (2022-06-07)
|
|
|
|
|
|
|
|
|
|
- [revert: fix: comment has encoded](https://github.com/leizongmin/js-xss/pull/257)
|
|
|
|
|
|
2022-06-04 00:12:31 +08:00
|
|
|
## v1.0.12 (2022-06-04)
|
|
|
|
|
|
|
|
|
|
- [feat: add eslint:recommended check](https://github.com/leizongmin/js-xss/pull/252) by @lumburr
|
|
|
|
|
- [fix: comment has encoded](https://github.com/leizongmin/js-xss/pull/257) by @lumburr
|
|
|
|
|
- [fix: whitelist match failure due to case ignoring](https://github.com/leizongmin/js-xss/pull/256) by @lumburr
|
|
|
|
|
- [fix: class is wrong separated by attributes in method onTagAttr](https://github.com/leizongmin/js-xss/pull/253) by @lumburr
|
|
|
|
|
|
2022-03-06 15:21:07 +08:00
|
|
|
## v1.0.11 (2022-03-06)
|
|
|
|
|
|
2022-06-04 00:12:31 +08:00
|
|
|
- [feat: add support for allowList as an alias for whiteList](https://github.com/leizongmin/js-xss/pull/249) by @schu34
|
2022-03-06 15:21:07 +08:00
|
|
|
|
2021-10-08 16:50:33 +08:00
|
|
|
## v1.0.10 (2021-10-08)
|
|
|
|
|
|
|
|
|
|
- [Fix: #239 stripCommentTag DoS attack](https://github.com/leizongmin/js-xss/pull/239)
|
|
|
|
|
|
2021-05-06 11:32:55 +08:00
|
|
|
## v1.0.9 (2021-05-06)
|
|
|
|
|
|
|
|
|
|
- [Fix whitespace bypass #218](https://github.com/leizongmin/js-xss/pull/218/files) by @TomAnthony
|
|
|
|
|
- [Add `<summary>` to default whitelist #216](https://github.com/leizongmin/js-xss/pull/216) by @spacegaier
|
2021-05-06 13:08:35 +08:00
|
|
|
- [Add `<figure>` and `<figcaption>` to default whitelist](https://github.com/leizongmin/js-xss/pull/220) by @daraz999
|
|
|
|
|
- Add `<audio crossorigin muted>`, `<video crossorigin muted playsinline poster>` to default whitelist
|
2021-05-06 13:11:03 +08:00
|
|
|
- Add `<strike>` to default whitelist
|
2021-05-06 13:29:53 +08:00
|
|
|
- Fix: typings IWhiteList allow any tag name
|
|
|
|
|
- Fix: typings `onTag` options
|
2021-05-06 11:32:55 +08:00
|
|
|
|
2020-07-27 10:21:57 +08:00
|
|
|
## v1.0.8 (2020-07-27)
|
|
|
|
|
|
2020-07-27 10:28:36 +08:00
|
|
|
- [Allow default imports in TS #200](https://github.com/leizongmin/js-xss/pull/200) by @danvk
|
|
|
|
|
- [Update handling of quoteStart to prevent sanitization bypass #201](https://github.com/leizongmin/js-xss/pull/201) by @TomAnthony
|
2020-07-27 10:21:57 +08:00
|
|
|
|
2020-06-08 10:58:18 +08:00
|
|
|
## v1.0.7 (2020-06-08)
|
|
|
|
|
|
2020-07-27 10:28:36 +08:00
|
|
|
- [added support for src embedded image, ftp and relative urls](https://github.com/leizongmin/js-xss/pull/189) by @sijanec
|
