Skip to content

v2.3.0

Latest

Choose a tag to compare

@weili-govtech weili-govtech released this 27 Oct 07:45
· 352 commits to main since this release

🐞 Bug fixes

  • Fixed image-upload tracking images by index instead of id, and ensured image ids are unique
  • Removed aria-readonly from location-field button

🛡️ Security hardening

  • file-upload, e-signature-field: only fetch prefilled fileUrl when it is an http(s) URL
  • FileHelper: restrict sanitizeFileName to safe characters and strip path traversal sequences
  • Schema-authored CSS (cssText): allowlist layout declarations and resolve CSS escapes before filtering

Full Changelog: v2.2.11...v2.3.0