All Versions
102
Latest Version
Avg Release Cycle
38 days
Latest Release
511 days ago

Changelog History
Page 4

  • v1.26.0 Changes

    • โž• Adds the option element to the default nonTextTagsArray of tags with contents that aren't meant to be displayed visually as text. This can be overridden with the nonTextTags option.
  • v1.25.0 Changes

    • โž• Adds enforceHtmlBoundary option to process code bounded by the html tag, discarding any code outside of those tags.
    • ๐Ÿ“ฆ Migrates to the main lodash package from the per method packages since they are deprecated and cause code duplication. Thanks to Merceyz for the contribution.
    • โž• Adds a warning when style and script tags are allowed, as they are inherently vulnerable to being used in XSS attacks. That warning can be disabled by including the option allowVulnerableTags: true so this choice is knowing and explicit.
  • v1.24.0 Changes

    • ๐Ÿ›  Fixes a bug where self-closing tags resulted in deletion with disallowedTagsMode: 'escape' set. Thanks to Thiago Negri for the contribution.
    • โž• Adds abbr to the default allowedTags for better accessibility support. Thanks to Will Farrell for the contribution.
    • โž• Adds a mediaChildren property to the frame object in custom filters. This allows you to check for links or other parent tags that contain self-contained media to prevent collapse, regardless of whether there is also text inside. Thanks to axdg for the initial implementation and Marco Arduini for a failing test contribution.
  • v1.23.0 Changes

    • โž• Adds eslint configuration and adds eslint to test script.
    • ๐Ÿ— Sets sideEffects: false on package.json to allow module bundlers like webpack tree-shake this module and all the dependencies from client build. Thanks to Egor Voronov for the contribution.
    • โž• Adds the tagName (HTML element name) as a second parameter passed to textFilter. Thanks to Slava for the contribution.
  • v1.22.1 Changes

    ๐Ÿ”€ ncreases the patch version of lodash.mergewith to enforce an audit fix.

  • v1.22.0 Changes

    โฌ†๏ธ bumped htmlparser2 dependency to the 4.x series. This fixes longstanding bugs and should cause no bc breaks for this module, since the only bc breaks upstream are in regard to features we don't expose in this module.

  • v1.21.1 Changes

    ๐Ÿ›  fixed issue with bad main setting in package.json that broke 1.21.0.

  • v1.21.0 Changes

    ๐Ÿ†• new disallowedTagsMode option can be set to escape to escape disallowed tags rather than discarding them. Any subtags are handled as usual. If you want to recursively escape them too, you can set disallowedTagsMode to recursiveEscape. Thanks to Yehonatan Zecharia for this contribution.

  • v1.20.1 Changes

    ๐Ÿ›  Fix failing tests, add CircleCI config

  • v1.20.0 Changes

    โฌ‡๏ธ reduced size of npm package via the files key; we only need to publish what's in dist. Thanks to Steven. There should be zero impact on behavior, minor version bump is precautionary.