@kolkov/angular-editor
Advanced tools
+20
-0
@@ -0,1 +1,21 @@ | ||
| <a name="3.0.3"></a> | ||
| ## [3.0.3](https://github.com/kolkov/angular-editor/compare/v3.0.2...v3.0.3) (2025-01-22) - Security Hotfix | ||
| ### Security | ||
| * **CRITICAL:** Fixed XSS vulnerability in `refreshView()` method ([#580](https://github.com/kolkov/angular-editor/issues/580)) ([774a97d](https://github.com/kolkov/angular-editor/commit/774a97d)) | ||
| - XSS could bypass sanitizer when setting editor value via ngModel/formControl | ||
| - Sanitization now properly applied to all innerHTML assignments | ||
| - Thanks to @MarioTesoro for responsible disclosure with PoC | ||
| ### Bug Fixes | ||
| * **links:** Preserve relative URLs when editing existing links ([#359](https://github.com/kolkov/angular-editor/issues/359)) ([c691d30](https://github.com/kolkov/angular-editor/commit/c691d30)) | ||
| - Use `getAttribute('href')` instead of `.href` property | ||
| - Prevents adding hostname to relative paths | ||
| * **debug:** Remove debug `console.log` statement from focus() method ([#324](https://github.com/kolkov/angular-editor/issues/324)) ([c691d30](https://github.com/kolkov/angular-editor/commit/c691d30)) | ||
| ### Upgrade Recommendation | ||
| **IMMEDIATE UPGRADE RECOMMENDED** for all users. This release fixes a critical security vulnerability. | ||
| --- | ||
| <a name="3.0.2"></a> | ||
@@ -2,0 +22,0 @@ ## [3.0.2](https://github.com/kolkov/angular-editor/compare/v3.0.1...v3.0.2) (2025-01-22) |
+1
-1
| { | ||
| "name": "@kolkov/angular-editor", | ||
| "version": "3.0.2", | ||
| "version": "3.0.3", | ||
| "description": "A simple native WYSIWYG editor for Angular 20+. Rich Text editor component for Angular.", | ||
@@ -5,0 +5,0 @@ "author": "Andrey Kolkov <a.kolkov@gmail.com>", |
+1
-2
@@ -7,7 +7,6 @@ <p align="center"> | ||
| [](https://badge.fury.io/js/%40kolkov%2Fangular-editor) | ||
| [](https://github.com/kolkov/angular-editor/actions/workflows/publish.yml) | ||
| [](https://stackblitz.com/edit/angular-editor-wysiwyg) | ||
| [](https://travis-ci.com/kolkov/angular-editor) | ||
| [](https://www.npmjs.com/package/@kolkov/angular-editor) | ||
| [](https://www.jsdelivr.com/package/npm/@kolkov/angular-editor) | ||
| [](https://coveralls.io/github/kolkov/angular-editor?branch=main) | ||
| [](https://codecov.io/gh/kolkov/angular-editor) | ||
@@ -14,0 +13,0 @@ [](https://paypal.me/AndreyKolkov) |
Sorry, the diff of this file is too big to display
Sorry, the diff of this file is too big to display
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
236192
0.82%1916
0.26%354
-0.28%