Skip to content

File Viewer 3.0.3

Choose a tag to compare

View all tags
@wybaby168 wybaby168 released this 09 Sep 19:03
v3.0.3
fb65b21
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixes and additions

  • MapLibre 6.4.1 closes the attribution HTML sanitizer bypass while retaining an offline Worker. Update js-yaml, sharp and Vitest security versions and remove the unused Browserify toolchain.
  • Core and renderers share DOMPurify 3.4.15, including its XML sanitization hardening without duplicate direct versions.
  • Standard preview packages pin JSZip 3.10.2 for cross-realm binary inputs and consistent cold installs.
  • Word: preserve DOC revision records, paragraph marks and soft breaks; switch between all, final and original views without reopening the file. Correct DOC line spacing and font selection, and DOCX page-relative shapes.
  • Spreadsheets: find offscreen cells, preserve resized columns across zoom and sheet changes, and reject damaged required CFB streams while ignoring unused invalid MiniFAT chains.
  • Integration: fix iPhone Safari PDF focus, nested Vite asset discovery, Angular PPTX Workers and Vue CLI browser bundles. Add isolated RequireJS AMD entries while retaining Vue 2.6/2.7 support.
  • Preview and output: add sandboxed static HTML/source views; correct OFD resource paths and namespaces; fix CAD/DWF contrast and current-view PNG/JPEG, HTML and print output with watermark and permission checks.

This release contains 87 packages at 3.0.3 and the msdoc-viewer compatibility package at 0.2.6. It uses DOCX 0.3.31, styled-exceljs 0.21.6, CAD 0.8.2 and DWF 0.6.7. Pako 3 remains deferred. This patch also includes the additions listed above.

The private XLS from #227, the file containing the deletion marks shown in #236, and the historical OFD from #57 are still unavailable. Tested constructed files do not establish those originals' root causes. The supplied sales contract contains no tracked revisions; the viewer does not invent them.

Demo | Documentation | Changelog

Security audit exceptions remain explicit: Vue 2 compatibility and the unused adm-zip dependency declared by dcmjs 0.52.0, for which no patched version is published. The latter is guarded by version, export and consumer checks; it is not a claim that adm-zip itself is fixed.

Assets 101
Loading