@jupyterlab/apputils-extension - npm Package Compare versions

Comparing version 4.2.4 to 4.2.5

lib/index.js

@@ -564,2 +564,4 @@ /* -----------------------------------------------------------------------------
             const autolink = setting.get('autolink').composite;
+            const allowNamedProperties = setting.get('allowNamedProperties')
+                .composite;
             if (allowedSchemes) {
@@ -569,2 +571,3 @@ sanitizer.setAllowedSchemes(allowedSchemes);
             sanitizer.setAutolink(autolink);
+            sanitizer.setAllowNamedProperties(allowNamedProperties);
         };
@@ -571,0 +574,0 @@ // Wait for the application to be restored and

package.json

 {
   "name": "@jupyterlab/apputils-extension",
-  "version": "4.2.4",
+  "version": "4.2.5",
   "description": "JupyterLab - Application Utilities Extension",
@@ -40,15 +40,15 @@ "homepage": "https://github.com/jupyterlab/jupyterlab",
   "dependencies": {
-    "@jupyterlab/application": "^4.2.4",
-    "@jupyterlab/apputils": "^4.3.4",
-    "@jupyterlab/coreutils": "^6.2.4",
-    "@jupyterlab/docregistry": "^4.2.4",
-    "@jupyterlab/mainmenu": "^4.2.4",
-    "@jupyterlab/rendermime-interfaces": "^3.10.4",
-    "@jupyterlab/services": "^7.2.4",
-    "@jupyterlab/settingregistry": "^4.2.4",
-    "@jupyterlab/statedb": "^4.2.4",
-    "@jupyterlab/statusbar": "^4.2.4",
-    "@jupyterlab/translation": "^4.2.4",
-    "@jupyterlab/ui-components": "^4.2.4",
-    "@jupyterlab/workspaces": "^4.2.4",
+    "@jupyterlab/application": "^4.2.5",
+    "@jupyterlab/apputils": "^4.3.5",
+    "@jupyterlab/coreutils": "^6.2.5",
+    "@jupyterlab/docregistry": "^4.2.5",
+    "@jupyterlab/mainmenu": "^4.2.5",
+    "@jupyterlab/rendermime-interfaces": "^3.10.5",
+    "@jupyterlab/services": "^7.2.5",
+    "@jupyterlab/settingregistry": "^4.2.5",
+    "@jupyterlab/statedb": "^4.2.5",
+    "@jupyterlab/statusbar": "^4.2.5",
+    "@jupyterlab/translation": "^4.2.5",
+    "@jupyterlab/ui-components": "^4.2.5",
+    "@jupyterlab/workspaces": "^4.2.5",
     "@lumino/algorithm": "^2.0.1",
@@ -55,0 +55,0 @@ "@lumino/commands": "^2.3.0",

schema/sanitizer.json

@@ -22,2 +22,8 @@ {
       "default": true
+    },
+    "allowNamedProperties": {
+      "type": "boolean",
+      "title": "Allow named properties",
+      "description": "Whether to allow untrusted elements to include `name` and `id` attributes. These attributes are stripped by default to prevent DOM clobbering attacks.",
+      "default": false
     }
@@ -24,0 +30,0 @@ },

src/index.ts

@@ -696,2 +696,4 @@ /* -----------------------------------------------------------------------------
       const autolink = setting.get('autolink').composite as boolean;
+      const allowNamedProperties = setting.get('allowNamedProperties')
+        .composite as boolean;
 
@@ -703,2 +705,3 @@ if (allowedSchemes) {
       sanitizer.setAutolink(autolink);
+      sanitizer.setAllowNamedProperties(allowNamedProperties);
     };
@@ -705,0 +708,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

307615

increased by0.25%

Lines of code

6333

increased by0.19%

Dependency changes

• Updated@jupyterlab/application@^4.2.5

• Updated@jupyterlab/apputils@^4.3.5

• Updated@jupyterlab/coreutils@^6.2.5

• Updated@jupyterlab/docregistry@^4.2.5

• Updated@jupyterlab/mainmenu@^4.2.5

• Updated@jupyterlab/rendermime-interfaces@^3.10.5

• Updated@jupyterlab/services@^7.2.5

• Updated@jupyterlab/settingregistry@^4.2.5

• Updated@jupyterlab/statedb@^4.2.5

• Updated@jupyterlab/statusbar@^4.2.5

• Updated@jupyterlab/translation@^4.2.5

• Updated@jupyterlab/ui-components@^4.2.5

• Updated@jupyterlab/workspaces@^4.2.5