auth0-lock 11.34.0 → 11.34.1

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Change Log
 
+## [v11.34.1](https://github.com/auth0/lock/tree/v11.34.1) (2022-09-29)
+[Full Changelog](https://github.com/auth0/lock/compare/v11.34.0...v11.34.1)
+
+**Fixed**
+- [ESD-22705] Don't pass function to ConfirmationPane unless closable is enabled [\#2176](https://github.com/auth0/lock/pull/2176) ([ewanharris](https://github.com/ewanharris))
+
+**Security**
+- [ESD-22866] Disable spellcheck and autocorrect on all sensitive input fields [\#2178](https://github.com/auth0/lock/pull/2178) ([ewanharris](https://github.com/ewanharris))
+
 ## [v11.34.0](https://github.com/auth0/lock/tree/v11.34.0) (2022-09-14)
 [Full Changelog](https://github.com/auth0/lock/compare/v11.33.3...v11.34.0)
 

package/README.md

@@ -25,7 +25,7 @@ From CDN
 
 ```html
 <!-- Latest patch release (recommended for production) -->
-<script src="https://cdn.auth0.com/js/lock/11.34.0/lock.min.js"></script>
+<script src="https://cdn.auth0.com/js/lock/11.34.1/lock.min.js"></script>
 ```
 
 From [npm](https://npmjs.org)
@@ -490,7 +490,7 @@ Extra input fields can be added to the sign up screen with the `additionalSignUp
 
 Additional sign up fields are rendered below the default fields in the order they are provided.
 
-:warning: **Note**: From `11.34.0` onwards, all HTML tags are stripped from user input into custom signup fields.
+:warning: **Note**: From `11.34.1` onwards, all HTML tags are stripped from user input into custom signup fields.
 
 ##### Text field
 

package/lib/connection/passwordless/email_sent_confirmation.js

@@ -165,7 +165,7 @@ var EmailSentConfirmation = function (_React$Component3) {
 
     var lock = this.props.lock;
 
-    var _closeHandler = l.ui.closable(lock) ? this.handleClose : undefined;
+    var closeHandler = l.ui.closable(lock) ? this.handleClose.bind(this) : undefined;
     var labels = {
       failed: i18n.str(lock, 'failedLabel'),
       resend: i18n.str(lock, 'resendLabel'),
@@ -181,9 +181,7 @@ var EmailSentConfirmation = function (_React$Component3) {
         backHandler: function backHandler() {
           return _this4.handleBack();
         },
-        closeHandler: function closeHandler() {
-          return _closeHandler();
-        }
+        closeHandler: closeHandler
       },
       _react2.default.createElement(
         'p',

package/lib/core/web_api/helper.js

@@ -176,5 +176,5 @@ function trimAuthParams() {
 }
 
 function getVersion() {
-  return '11.34.0';
+  return '11.34.1';
 }

package/lib/i18n.js

@@ -125,7 +125,7 @@ function assertLanguage(m, language, base) {
 function syncLang(m, language, _cb) {
   (0, _cdn_utils.load)({
     method: 'registerLanguageDictionary',
-    url: l.languageBaseUrl(m) + '/js/lock/' + '11.34.0' + '/' + language + '.js',
+    url: l.languageBaseUrl(m) + '/js/lock/' + '11.34.1' + '/' + language + '.js',
     check: function check(str) {
       return str && str === language;
     },

package/lib/lock.js

@@ -42,7 +42,7 @@ var Auth0Lock = function (_Core) {
 
 
 exports.default = Auth0Lock;
-Auth0Lock.version = '11.34.0';
+Auth0Lock.version = '11.34.1';
 
 // TODO: should we have different telemetry for classic/passwordless?
 // TODO: should we set telemetry info before each request?

package/lib/passwordless.js

@@ -41,4 +41,4 @@ var Auth0LockPasswordless = function (_Core) {
 exports.default = Auth0LockPasswordless;
 
 
-Auth0LockPasswordless.version = '11.34.0';
+Auth0LockPasswordless.version = '11.34.1';

package/lib/ui/input/captcha_input.js

@@ -154,6 +154,8 @@ var CaptchaInput = function (_React$Component) {
           placeholder: placeholder,
           autoComplete: 'off',
           autoCapitalize: 'off',
+          autoCorrect: 'off',
+          spellCheck: 'false',
           onChange: this.handleOnChange.bind(this),
           onFocus: this.handleFocus.bind(this),
           onBlur: this.handleBlur.bind(this),

package/lib/ui/input/email_input.js

@@ -108,6 +108,8 @@ var EmailInput = function (_React$Component) {
         placeholder: 'yours@example.com',
         autoComplete: autoComplete ? 'on' : 'off',
         autoCapitalize: 'off',
+        autoCorrect: 'off',
+        spellCheck: 'false',
         onChange: this.handleOnChange.bind(this),
         onFocus: this.handleFocus.bind(this),
         onBlur: this.handleBlur.bind(this),

package/lib/ui/input/mfa_code_input.js

@@ -77,6 +77,8 @@ var MFACodeInput = function (_React$Component) {
         className: 'auth0-lock-input',
         autoComplete: 'off',
         autoCapitalize: 'off',
+        autoCorrect: 'off',
+        spellCheck: 'false',
         onChange: this.handleOnChange.bind(this),
         onFocus: this.handleFocus.bind(this),
         onBlur: this.handleBlur.bind(this),

package/lib/ui/input/password_input.js

@@ -121,6 +121,8 @@ var PasswordInput = function (_React$Component) {
         className: 'auth0-lock-input',
         autoComplete: allowPasswordAutocomplete ? 'on' : 'off',
         autoCapitalize: 'off',
+        autoCorrect: 'off',
+        spellCheck: 'false',
         onChange: this.handleOnChange.bind(this),
         onFocus: this.handleFocus.bind(this),
         onBlur: this.handleBlur.bind(this),

package/lib/ui/input/phone_number_input.js

@@ -90,6 +90,8 @@ var PhoneNumberInput = function (_React$Component) {
         name: 'phoneNumber',
         className: 'auth0-lock-input auth0-lock-input-number',
         autoComplete: 'off',
+        autoCorrect: 'off',
+        spellCheck: 'false',
         onFocus: this.handleFocus.bind(this),
         onBlur: this.handleBlur.bind(this),
         'aria-label': 'Telephone number',

package/lib/ui/input/username_input.js

@@ -99,7 +99,7 @@ var UsernameInput = function (_React$Component) {
         placeholder: 'username',
         autoComplete: autoComplete ? 'on' : 'off',
         autoCapitalize: 'off',
-        spellCheck: 'off',
+        spellCheck: 'false',
         autoCorrect: 'off',
         onChange: this.handleOnChange.bind(this),
         onFocus: this.handleFocus.bind(this),

package/lib/ui/input/vcode_input.js

@@ -104,6 +104,8 @@ var VcodeInput = function (_React$Component) {
         className: 'auth0-lock-input auth0-lock-input-code',
         autoComplete: 'off',
         autoCapitalize: 'off',
+        autoCorrect: 'off',
+        spellCheck: 'false',
         onFocus: this.handleFocus.bind(this),
         onBlur: this.handleBlur.bind(this),
         'aria-label': 'vcode',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auth0-lock",
-  "version": "11.34.0",
+  "version": "11.34.1",
   "description": "Auth0 Lock",
   "author": "Auth0 <support@auth0.com> (http://auth0.com)",
   "license": "MIT",