Changelog History
Page 4
-
v1.26.0 Changes
- โ Adds the
option
element to the defaultnonTextTagsArray
of tags with contents that aren't meant to be displayed visually as text. This can be overridden with thenonTextTags
option.
- โ Adds the
-
v1.25.0 Changes
- โ Adds
enforceHtmlBoundary
option to process code bounded by thehtml
tag, discarding any code outside of those tags. - ๐ฆ Migrates to the main lodash package from the per method packages since they are deprecated and cause code duplication. Thanks to Merceyz for the contribution.
- โ Adds a warning when
style
andscript
tags are allowed, as they are inherently vulnerable to being used in XSS attacks. That warning can be disabled by including the optionallowVulnerableTags: true
so this choice is knowing and explicit.
- โ Adds
-
v1.24.0 Changes
- ๐ Fixes a bug where self-closing tags resulted in deletion with
disallowedTagsMode: 'escape'
set. Thanks to Thiago Negri for the contribution. - โ Adds
abbr
to the defaultallowedTags
for better accessibility support. Thanks to Will Farrell for the contribution. - โ Adds a
mediaChildren
property to theframe
object in custom filters. This allows you to check for links or other parent tags that contain self-contained media to prevent collapse, regardless of whether there is also text inside. Thanks to axdg for the initial implementation and Marco Arduini for a failing test contribution.
- ๐ Fixes a bug where self-closing tags resulted in deletion with
-
v1.23.0 Changes
- โ Adds eslint configuration and adds eslint to test script.
- ๐ Sets
sideEffects: false
on package.json to allow module bundlers like webpack tree-shake this module and all the dependencies from client build. Thanks to Egor Voronov for the contribution. - โ Adds the
tagName
(HTML element name) as a second parameter passed totextFilter
. Thanks to Slava for the contribution.
-
v1.22.1 Changes
๐ ncreases the patch version of
lodash.mergewith
to enforce an audit fix. -
v1.22.0 Changes
โฌ๏ธ bumped
htmlparser2
dependency to the 4.x series. This fixes longstanding bugs and should cause no bc breaks for this module, since the only bc breaks upstream are in regard to features we don't expose in this module. -
v1.21.1 Changes
๐ fixed issue with bad
main
setting in package.json that broke 1.21.0. -
v1.21.0 Changes
๐ new
disallowedTagsMode
option can be set toescape
to escape disallowed tags rather than discarding them. Any subtags are handled as usual. If you want to recursively escape them too, you can setdisallowedTagsMode
torecursiveEscape
. Thanks to Yehonatan Zecharia for this contribution. -
v1.20.1 Changes
๐ Fix failing tests, add CircleCI config
-
v1.20.0 Changes
โฌ๏ธ reduced size of npm package via the
files
key; we only need to publish what's indist
. Thanks to Steven. There should be zero impact on behavior, minor version bump is precautionary.