apostrophe-tumblr - npm Package Compare versions

Comparing version 0.5.10 to 0.5.11

index.js

@@ -89,3 +89,3 @@ var feedparser = require('feedparser');
         // Force HTTPS, tumblr's images and videos will work that way
-        article.description = article.description.replace(/src="http\:(.*?)"/g, 'src="https\:$1"');
+        article.description = article.description.replace(/(src|poster)="http\:(.*?)"/g, 'src="https\:$2"');
         return {
@@ -92,0 +92,0 @@ title: article.title,

package.json

 {
   "name": "apostrophe-tumblr",
-  "version": "0.5.10",
+  "version": "0.5.11",
   "description": "Adds a Tumblr RSS widget to the Apostrophe content management system",
@@ -5,0 +5,0 @@ "main": "index.js",

public/js/content.js

@@ -7,3 +7,3 @@ apos.widgetPlayers.tumblr = function($el) {
     if (!url.match(/^https?\:\/\//)) {
-      url = 'http://' + url;
+      url = 'https://' + url;
     }
@@ -10,0 +10,0 @@ return url;

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12166

increased by0.08%

Number of medium supply chain risk alerts

0

decreased by-100%

No dependency changes