@instructure/platform-assignment-review 0.4.18 → 0.4.19
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +27 -1
- package/package.json +2 -2
package/dist/index.js
CHANGED
|
@@ -997,7 +997,33 @@ const Fi = /* @__PURE__ */ new Set([
|
|
|
997
997
|
// files from a separate sandboxed origin. object/embed also have no usable
|
|
998
998
|
// sandbox attribute, so the sandbox-token hook cannot constrain them — again,
|
|
999
999
|
// parity with an unsandboxed iframe, which is already permitted.
|
|
1000
|
-
|
|
1000
|
+
//
|
|
1001
|
+
// maction…none are the remaining MathML presentation/layout containers from
|
|
1002
|
+
// DOMPurify's mathMlDisallowed set (RCX-5259). They are re-added as tags only:
|
|
1003
|
+
// unlike annotation-xml they are NOT HTML integration points, so they carry no
|
|
1004
|
+
// namespace-confusion (mXSS) risk and need no guarding hook. Because they go in
|
|
1005
|
+
// ADD_TAGS and not ADD_ATTR, DOMPurify keeps filtering their attributes — an
|
|
1006
|
+
// event handler like onclick on <maction> is still stripped.
|
|
1007
|
+
ADD_TAGS: [
|
|
1008
|
+
"iframe",
|
|
1009
|
+
"semantics",
|
|
1010
|
+
"annotation",
|
|
1011
|
+
"annotation-xml",
|
|
1012
|
+
"object",
|
|
1013
|
+
"embed",
|
|
1014
|
+
"param",
|
|
1015
|
+
"maction",
|
|
1016
|
+
"maligngroup",
|
|
1017
|
+
"malignmark",
|
|
1018
|
+
"mlongdiv",
|
|
1019
|
+
"mscarries",
|
|
1020
|
+
"mscarry",
|
|
1021
|
+
"msgroup",
|
|
1022
|
+
"mstack",
|
|
1023
|
+
"msline",
|
|
1024
|
+
"msrow",
|
|
1025
|
+
"none"
|
|
1026
|
+
],
|
|
1001
1027
|
ADD_ATTR: [
|
|
1002
1028
|
"allowfullscreen",
|
|
1003
1029
|
"allow",
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@instructure/platform-assignment-review",
|
|
3
|
-
"version": "0.4.
|
|
3
|
+
"version": "0.4.19",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"main": "./dist/index.js",
|
|
6
6
|
"module": "./dist/index.js",
|
|
@@ -39,7 +39,7 @@
|
|
|
39
39
|
"graphql": "^16.0.0",
|
|
40
40
|
"graphql-tag": "^2.12.0",
|
|
41
41
|
"zod": "^3.23.8",
|
|
42
|
-
"@instructure/platform-sanitize": "0.5.
|
|
42
|
+
"@instructure/platform-sanitize": "0.5.2"
|
|
43
43
|
},
|
|
44
44
|
"devDependencies": {
|
|
45
45
|
"@testing-library/jest-dom": "^6.9.1",
|