Skip to content

Commit

Permalink
doc: update changelog
Browse files Browse the repository at this point in the history
  • Loading branch information
dylanarmstrong committed Feb 23, 2024
1 parent 222210b commit dade120
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
# Changelog

## UNRELEASED

- Documentation update regarding minimum supported TypeScript version.

## 2.12.1 (2024-02-22)

- Do not parse sourcemaps in `post-css`. This fixes a vulnerability in which information about the existence or non-existence of files on a server could be disclosed via properly crafted HTML input when the `style` attribute is allowed by the configuration. Thanks to the [Snyk Security team](https://snyk.io/) for the disclosure and to [Dylan Armstrong](https://dylan.is/) for the fix.
Expand Down

0 comments on commit dade120

Please sign in to comment.