urijs - npm Package Versions
rodneyrehm
published 1.19.11 • Changelog
1.19.11 (April 3rd 2022) ###
- SECURITY fixing
URI.parse()handle excessive slashes in scheme-relative URLs - disclosed by zeyu2001 via https://huntr.dev/ - SECURITY fixing
URI.parse()remove\r(CR),\n, (LF)\t(TAB) - disclosed by haxatron via https://huntr.dev/
rodneyrehm
published 1.19.10 • Changelog
1.19.10 (March 5th 2022) ###
- SECURITY fixing
URI.parse()handle excessive colons in protocol delimiter - disclosed by huydoppa via https://huntr.dev/
rodneyrehm
published 1.19.9 • Changelog
1.19.9 (March 3rd 2022) ###
- SECURITY fixing
URI.parse()handle leading whitespace - disclosed by p0cas via https://huntr.dev/
rodneyrehm
published 1.19.8 • Changelog
1.19.8 (February 15th 2022) ###
- SECURITY fixing
URI.parse()treat scheme case-insenstivie when handling excessive slackes and backslashes - PR #412 by r0hanSH
rodneyrehm
published 1.19.7 • Changelog
1.19.7 (July 14th 2021) ###
- SECURITY fixing
URI.parseQuery()to prevent overwriting__proto__in parseQuery() - disclosed privately by @NewEraCracker - SECURITY fixing
URI.parse()to handle variable amounts of\and/in scheme delimiter as Node and Browsers do - disclosed privately by ready-research via https://huntr.dev/ - removed obsolete build tools
- updated jQuery versions (verifying compatibility with 1.12.4, 2.2.4, 3.6.0)
rodneyrehm
published 1.19.6 • Changelog
1.19.6 (February 13th 2021) ###
- SECURITY fixing
URI.parse()to rewrite\in scheme delimiter to/as Node and Browsers do - disclosed privately by Yaniv Nizry from the CxSCA AppSec team at Checkmarx
rodneyrehm
published 1.19.5 • Changelog
1.19.5 (December 30th 2020) ###
- dropping jquery.URI.js from minified bundle accidentally added since v1.19.3 - Issue #404
rodneyrehm
published 1.19.4 • Changelog
1.19.4 (December 23rd 2020) ###
- SECURITY fixing
URI.parseAuthority()to rewrite\to/as Node and Browsers do - followed up to by alesandroortiz in PR #403, relates to Issue #233
rodneyrehm
published 1.19.3 • Changelog
1.19.3 (December 20th 2020) ###
- SECURITY fixing
URI.parseAuthority()to rewrite\to/as Node and Browsers do - disclosed privately by alesandroortiz, relates to Issue #233
rodneyrehm
published 1.19.2 • Changelog
1.19.2 (October 20th 2019) ###
- fixing
URI.build()to properly handle relative paths when a scheme is given - Issue #387 - fixing
URI.buildQuery()to properly handle empty param name - Issue #243, PR #383 - support Composer PR #386