@sveltia/cms 0.105.1 → 0.105.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@sveltia/cms",
3
- "version": "0.105.1",
3
+ "version": "0.105.3",
4
4
  "description": "Sveltia CMS is a modern, lightweight, Git-based headless content management system.",
5
5
  "keywords": [
6
6
  "cms",
@@ -2942,8 +2942,8 @@
2942
2942
  },
2943
2943
  "sanitize_preview": {
2944
2944
  "type": "boolean",
2945
- "description": "Whether to sanitize the preview HTML. Default: `false`.",
2946
- "markdownDescription": "Whether to sanitize the preview HTML. Default: `false`."
2945
+ "description": "Whether to sanitize the preview HTML. Default: `true`. Note that Sveltia CMS has changed the default value from `false` to `true` to enhance security, whereas Netlify/Decap CMS keeps it as `false`. We recommend keeping this option enabled unless disabling it fixes a broken preview and you fully trust all users of your CMS.",
2946
+ "markdownDescription": "Whether to sanitize the preview HTML. Default: `true`. Note that Sveltia CMS has changed the default value from `false` to `true` to enhance security, whereas Netlify/Decap CMS keeps it as `false`. We recommend keeping this option enabled unless disabling it fixes a broken preview and you fully trust all users of your CMS."
2947
2947
  },
2948
2948
  "linked_images": {
2949
2949
  "type": "boolean",
package/types/public.d.ts CHANGED
@@ -826,7 +826,10 @@ export type MarkdownFieldProps = {
826
826
  */
827
827
  modes?: RichTextEditorMode[];
828
828
  /**
829
- * Whether to sanitize the preview HTML. Default: `false`.
829
+ * Whether to sanitize the preview HTML. Default: `true`.
830
+ * Note that Sveltia CMS has changed the default value from `false` to `true` to enhance security,
831
+ * whereas Netlify/Decap CMS keeps it as `false`. We recommend keeping this option enabled unless
832
+ * disabling it fixes a broken preview and you fully trust all users of your CMS.
830
833
  */
831
834
  sanitize_preview?: boolean;
832
835
  /**