Skip to content

v1.0.6

Choose a tag to compare

View all tags
@FastPix-dev FastPix-dev released this 09 Jun 12:08
· 24 commits to main since this release
v1.0.6
1ec6607
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Version - [1.0.6]

Security

  • Hardened the test harness against SonarQube findings with code sanitization and safer input handling, ensuring user-provided manifest URLs are trimmed and validated before playback.
  • Added Subresource Integrity (SRI) hash and crossorigin attribute to the Shaka Player CDN script to prevent tampered third-party code from executing.

Changed

  • Replaced window references with globalThis for safer, environment-agnostic global access.
  • Refactored player lifecycle handling with dedicated load/destroy controls and proper teardown to avoid resource leaks.
  • Added Azure Pipelines configuration (azure-pipelines.yaml) and SonarQube project settings (sonar-project.properties) for automated code quality and static analysis.
Assets 2
Loading