Skip to content

v5.2.0

Latest
Latest

Choose a tag to compare

View all tags
@DrRataplan DrRataplan released this 21 Oct 13:37
· 17 commits to dev since this release
v5.2.0
89c308f

Fixed

This release addresses a number of XSS vectors where innerHTML was written to with user-supplied data. Please update to this version of Fore when you can.

New features
<fx-output mediatype="html"> now accepts an unsafe attribute, which will circumvent any sanitation. Only use this when the content is not user-supplied.

Full Changelog: v5.1.0...v5.2.0

Assets 2
Loading