老雷
6586f4966e
Merge pull request #216 from spacegaier/patch-1
...
Add `<summary>` to default whitelist
2021-05-06 11:20:15 +08:00
老雷
20869bef8c
Merge pull request #222 from aprilandjan/master
...
docs: correct empty whiteList typing in examples
2021-05-06 11:19:04 +08:00
aprilandjan
3860fe7cca
docs: correct empty whiteList typing in examples
2021-02-26 19:22:01 +08:00
Philip Allgaier
cb35b4ca02
Add <summary> to default whitelist
...
Since `<details>` is in there, it makes sense for `<summary>` as well since that is used inside `<details>` to define the text label/title for the collapsible element.
2021-01-24 20:30:11 +01:00
老雷
be1d80c89d
Merge pull request #204 from timgates42/bugfix_typo_double
...
docs: Fix simple typo, doube -> double
2020-10-27 01:21:07 +08:00
老雷
48a3a323b6
Merge pull request #202 from swseverance/fix-documentation
...
Fix Documentation Example
2020-09-16 18:58:31 +08:00
Tim Gates
cf5a36696a
docs: Fix simple typo, doube -> double
...
There is a small typo in dist/xss.js, lib/default.js.
Should read `double` rather than `doube`.
2020-09-01 07:48:41 +10:00
Sam Severance
1691814807
Fix Documentation Example
2020-08-03 09:06:31 -04:00
老雷
fa53e3929b
Update CHANGELOG.md
2020-07-27 10:28:36 +08:00
Zongmin Lei
39f6fce862
chore: update bower.json
2020-07-27 10:25:25 +08:00
Zongmin Lei
ccff2e55c2
publish: v1.0.8
2020-07-27 10:21:57 +08:00
Zongmin Lei
b12fb387a6
test: add more test for parseAttr
2020-07-27 10:10:40 +08:00
老雷
353ffdc73a
Merge pull request #201 from TomAnthony/fix-bypass-issue
...
Update handling of quoteStart to prevent sanitization bypass
2020-07-24 19:13:00 +08:00
Tom Anthony
379d181273
Make coding style project consistent.
2020-07-24 10:41:06 +01:00
Zongmin Lei
10d0099728
chore: remove node_js version 6.0 on .travis.yml
2020-07-23 17:33:11 +08:00
Zongmin Lei
5f2bacf590
chore: remove node_js version 4.0 & 5.0 on .travis.yml
2020-07-23 17:28:05 +08:00
老雷
ad66b19834
Merge pull request #200 from danvk/typescript-default-import
...
Allow default imports in TS
2020-07-23 17:24:14 +08:00
Tom Anthony
f454fd76e6
Update handling of quoteStart to allow for whitespace after =. Add a new test case for this failure scenario.
2020-07-22 23:40:13 +01:00
Dan Vanderkam
4d07aeaa8a
Allow default imports in TS
2020-07-21 17:20:24 -04:00
老雷
9a34334b99
Create codeql-analysis.yml
2020-07-16 14:24:38 +08:00
Zongmin Lei
b61c373d66
chore: use nyc instead of istanbul
2020-06-08 14:46:12 +08:00
Zongmin Lei
a8cbb0900b
chore: remove package-lock.json
2020-06-08 14:44:34 +08:00
Zongmin Lei
04516fcd53
chore: update bower.json
2020-06-08 11:01:16 +08:00
Zongmin Lei
c03f924100
chore: .travis.yml add node_js version 12.0 & 14.0
2020-06-08 11:00:42 +08:00
Zongmin Lei
fbe45f6b93
publish: v1.0.7
2020-06-08 10:58:18 +08:00
Zongmin Lei
4f88322961
chore: update dependencies
2020-06-08 10:47:45 +08:00
Zongmin Lei
b82a3270fa
fix test for #189
2020-06-08 10:46:47 +08:00
老雷
154174dd9e
Merge pull request #189 from sijanec/patch-1
...
added support for src embedded image, ftp and relative urls
2020-06-08 10:40:44 +08:00
老雷
a48d842cbb
Merge pull request #188 from jcfranco/patch-1
...
Fix typo.
2020-06-08 10:37:17 +08:00
sijanec
8efd6327ae
fix, as suggested by Ronald J Kimball
2020-02-22 21:59:36 +01:00
sijanec
07ac8b16c1
added support for src embedded image, ftp and relative urls
...
Those can't contain playloads. Reference to the issue #174
2020-02-09 00:24:43 +01:00
JC Franco
db897317c4
Fix typo.
2020-01-29 20:46:43 -08:00
老雷
53ba52a599
Create FUNDING.yml
2019-05-26 10:35:56 +08:00
Zongmin Lei
2eb4a21f12
chore: update devDependencies
2019-04-13 11:49:36 +08:00
Zongmin Lei
bc516a1863
fix: turn on strict mode for xss.js
2019-04-13 11:43:18 +08:00
Zongmin Lei
506e192329
chore: add package-lock.json & update dependencies
2019-04-13 11:40:41 +08:00
老雷
c3b242f25f
Merge pull request #144 from leizongmin/greenkeeper/browserify-16.2.2
...
Update browserify to the latest version 🚀
2019-04-13 11:34:43 +08:00
老雷
9a2832f477
Merge pull request #161 from sbertrang/patch-1
...
Fix strict mode statement in parser.js
2019-04-13 11:34:16 +08:00
Simon Bertrang
4c66d6e388
Update parser.js
...
Actually turn on strict mode.
2019-03-27 09:30:16 +01:00
Zongmin Lei
38ef7482f9
publish: v1.0.6
2019-03-21 11:00:21 +08:00
Zongmin Lei
6032d2a314
feat(typings): add more test
2019-03-21 11:00:09 +08:00
Zongmin Lei
1317bb05c6
feat(typings): add global XSS namespace
2019-03-21 10:58:56 +08:00
Zongmin Lei
75c7868e3e
publish: v1.0.5
2019-03-20 14:09:01 +08:00
Zongmin Lei
a605558986
refactor typings, not support xss(), use filterXSS()
2019-03-20 14:08:19 +08:00
Zongmin Lei
e1cc74c649
export function filterXSS
2019-03-20 14:07:13 +08:00
Zongmin Lei
8bfe969895
publish: v1.0.4
2019-03-20 13:45:08 +08:00
老雷
2acd5202e1
Merge pull request #155 from GenaBitu/reorganised-typings
...
Reorganised typings to expose the filterXSS function
2019-03-20 13:44:20 +08:00
GenaBitu
f93657a484
Reorganised typings to expose the filterXSS function
2019-01-27 16:11:53 +01:00
greenkeeper[bot]
c503faf063
chore(package): update browserify to version 16.2.2
2018-08-03 00:45:09 +00:00
Zongmin Lei
6abc5b52da
update build
2018-05-25 14:43:28 +08:00
