From b6c4971a822b9bc9c0a5fce5f6160dd2397cf260 Mon Sep 17 00:00:00 2001 From: Thomas Boutell Date: Wed, 20 Jul 2022 11:07:10 -0400 Subject: [PATCH] release 2.7.1 (with security fix previously tested and approved by Miro) --- CHANGELOG.md | 2 +- package.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 48c28c7..dc84443 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,6 @@ # Changelog -## UNRELEASED +## 2.7.1 (2022-07-20) - Protocol-relative URLs are properly supported for script tags. Thanks to [paweljq](https://github.com/paweljq). - A denial-of-service vulnerability has been fixed by replacing global regular expression replacement logic for comment removal with a new implementation. Thanks to Nariyoshi Chida of NTT Security Japan for pointing out the issue. diff --git a/package.json b/package.json index ab4981c..6054aff 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "sanitize-html", - "version": "2.7.0", + "version": "2.7.1", "description": "Clean up user-submitted HTML, preserving allowlisted elements and allowlisted attributes on a per-element basis", "sideEffects": false, "main": "index.js",