Skip to content

Release v0.24.0

Choose a tag to compare

@github-actions github-actions released this 16 Jul 17:31
f5b49f9

Literal braces reach your messages, and pre-rendered pages get the runtime's full protection. Rich text now decodes numeric HTML entities ({ and { style), so a message can finally show a literal { or } without confusing the placeholder syntax. In the same pass, verbaly render closes a gap with the runtime: translated attributes in static HTML now go through the exact same security guards as the browser interpreter. No breaking changes.

Highlights

  • Messages can now show literal curly braces. Write &#123; and &#125; in a rich message and they render as { and }. Before, a raw brace broke the placeholder syntax and the entity came out as literal text, so there was no way to display one. Hex forms like &#x7B; work too, in the browser, in every <Trans> and in pre-rendered pages.
  • Pre-rendered pages are now as safe as the browser. verbaly render translates attributes with the same rules the runtime always used: unsafe links (javascript: and friends) never land in the HTML, and dangerous attributes like style and srcdoc are never written from translations.

For the full details of this release, see the repository changelog.