Skip to content

3.9.2
Compare
Choose a tag to compare
@hakimel hakimel released this 31 Jan 10:14
· 724 commits to master since this release
3.9.2
94d98ff

Fixes a security vulnerability in the postMessage API. The follow methods are now blacklisted and can not be called via the postMessage API: registerPlugin, registerKeyboardShortcut, addKeyBinding, addEventListener.

Assets 2