mjml-core - npm Package Compare versions

Comparing version 3.3.1 to 3.3.2

lib/index.js

@@ -61,3 +61,3 @@ 'use strict';
 var version = exports.version = function version() {
-  return '3.3.1';
+  return '3.3.2';
 };
@@ -64,0 +64,0 @@ var MJMLValidator = exports.MJMLValidator = _mjmlValidator2.default;

lib/MJMLRenderer.js

@@ -102,3 +102,3 @@ 'use strict';
 
-var DANGEROUS_CHARS = ['{{', '}}', '<%', '%>', '<', '>', '{%', '%}', '{{{', '}}}'];
+var DANGEROUS_CHARS = ['{{', '}}', '<%', '%>', '<=', '=>', '{%', '%}', '{{{', '}}}'];
 var SEED = Math.floor(Math.random() * 0x10000000000).toString(16);
@@ -105,0 +105,0 @@ var PLACEHOLDER = '__MJML__' + SEED + '__';

package.json

 {
   "name": "mjml-core",
   "description": "mjml-core",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "main": "lib/index.js",
@@ -6,0 +6,0 @@ "scripts": {

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

96799

Number of medium supply chain risk alerts

0

decreased by-100%

No dependency changes