sanitize-html 1.14.2 → 1.14.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -0
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -366,6 +366,7 @@ The content still gets escaped properly, with the exception of the `script` and
|
|
|
366
366
|
|
|
367
367
|
## Changelog
|
|
368
368
|
|
|
369
|
+
1.14.3: inadvertent removal of lodash regexp quote dependency in 1.14.2 has been corrected.
|
|
369
370
|
1.14.2: protocol-relative URL detection must spot URLs starting with `\\` rather than `//` due to ages-old tolerance features of web browsers, intended for sleepy Windows developers. Thanks to Martin Bajanik.
|
|
370
371
|
1.14.1: documented `allowProtocolRelative` option. No code changes from 1.14.0, released a few moments ago.
|
|
371
372
|
1.14.0: the new `allowProtocolRelative` option, which is set to `true` by default, allows you to decline to accept URLs that start with `//` and thus point to a different host using the current protocol. If you do **not** want to permit this, set this option to `false`. This is fully backwards compatible because the default behavior is to allow them. Thanks to Luke Bernard.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "sanitize-html",
|
|
3
|
-
"version": "1.14.
|
|
3
|
+
"version": "1.14.3",
|
|
4
4
|
"description": "Clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis",
|
|
5
5
|
"main": "index.js",
|
|
6
6
|
"scripts": {
|
|
@@ -25,7 +25,7 @@
|
|
|
25
25
|
"license": "MIT",
|
|
26
26
|
"dependencies": {
|
|
27
27
|
"htmlparser2": "^3.9.0",
|
|
28
|
-
"
|
|
28
|
+
"lodash.escaperegexp": "^4.1.2",
|
|
29
29
|
"xtend": "^4.0.0"
|
|
30
30
|
},
|
|
31
31
|
"devDependencies": {
|