js-xss/CHANGELOG.md

CHANGELOG

v1.0.12 (2022-06-04)

• feat: add eslint:recommended check by @lumburr
• fix: comment has encoded by @lumburr
• fix: whitelist match failure due to case ignoring by @lumburr
• fix: class is wrong separated by attributes in method onTagAttr by @lumburr

v1.0.11 (2022-03-06)

• feat: add support for allowList as an alias for whiteList by @schu34

v1.0.10 (2021-10-08)

• Fix: #239 stripCommentTag DoS attack

v1.0.9 (2021-05-06)

• Fix whitespace bypass #218 by @TomAnthony
• Add <summary> to default whitelist #216 by @spacegaier
• Add <figure> and <figcaption> to default whitelist by @daraz999
• Add <audio crossorigin muted>, <video crossorigin muted playsinline poster> to default whitelist
• Add <strike> to default whitelist
• Fix: typings IWhiteList allow any tag name
• Fix: typings onTag options

v1.0.8 (2020-07-27)

• Allow default imports in TS #200 by @danvk
• Update handling of quoteStart to prevent sanitization bypass #201 by @TomAnthony

v1.0.7 (2020-06-08)

• added support for src embedded image, ftp and relative urls by @sijanec