Skip to content

JBrowse 1.17.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Jul 18:35
1.17.0-release
8b3578b
This commit was signed with the committer’s verified signature.
cmdcolin Colin Diesh
GPG key ID: A73172047D7555CE
Verified
Learn about vigilant mode.

Hi all, this 1.17.0 release follows up on 1.16.12. It adds a fix for a reflected
XSS in the &addTracks= URL parameter (#1670) along with proactive DOMPurify
hardening of innerHTML manipulation. It also removes the node-sass build
dependency by converting the stylesheets from SASS to plain CSS, so installing
and building JBrowse 1 from source works again on current Node and Yarn
versions. We encourage upgrading.

Bug fixes

  • Fix reflected XSS in the &addTracks= URL parameter (pull #1670)

  • Apply DOMPurify proactively to innerHTML manipulation to harden against XSS
    (pull #1660)

  • Restore alignments track coloring after the SASS to CSS change (pull #1661)

Build

  • Convert SASS to plain CSS and remove the node-sass build requirement, which
    fixes installing and building from source on current Node and Yarn (pull
    #1658)
Assets 6
Loading