[4.10.1] - 2020-09-10

Subresource integrity

<script
  crossorigin="anonymous"
  integrity="sha384-ZT32ehV2SkikXkWvH8cO0OsMgQoYg+zd09eBP5oJrcrL3FJWqPSB1IGifTBYKccw"
  src="https://cdn.botframework.com/botframework-webchat/4.10.1/webchat.js"
></script>

<script 
  crossorigin="anonymous"
  integrity="sha384-FT3pdxVxoyBtfEc83Xt1uxb8vm/KVuyBicVG6gM41mgXeGw/S3Q2/CThAtFXhxcN"
  src="https://cdn.botframework.com/botframework-webchat/4.10.1/webchat-es5.js"
></script>

<script 
  crossorigin="anonymous"
  integrity="sha384-GJIjDHDbUXiw9rCIhtfjJoyzI9eZktEvt9bVGgfki4OkUdR7XAEpvy3RrVZvvTFv"
  src="https://cdn.botframework.com/botframework-webchat/4.10.1/webchat-minimal.js"
></script>

Changelog

[4.10.1] - 2020-09-10

Breaking changes

• To support Content Security Policy, glamor is being replaced by create-emotion. The CSS hash and rule name is being prefixed with webchat--css with a random value.

Fixed

• Fixes #3431. Removed delay of first activity with replyToId pointing to a missing activity, by @compulim in PR #3450

Changed

• Support Content Security Policy, in PR #3443 by @compulim
  • Moved from glamor@2.20.40 to create-emotion@10.0.27
  • Inlined assets are now using blob: scheme, instead of data: scheme
  • Detect Web Worker support by loading a dummy Web Worker, instead of checking window.MessagePort and window.Worker
  • Data URI used in image of attachments will be converted to URL with scheme of blob:
  • Bumped dependencies
    • react-film@3.0.0
    • react-scroll-to-bottom@4.0.0
• Bumped all dependencies to the latest versions, by @corinagum in PR #3380, #3442
  • Development dependencies
    • Root package
      • @babel/plugin-proposal-class-properties@7.10.4
      • @babel/plugin-proposal-object-rest-spread@7.11.0
      • @babel/plugin-transform-runtime@7.11.0
      • @babel/preset-env@7.11.0
      • @babel/preset-react@7.10.4
      • @babel/preset-typescript@7.10.4
      • @babel/runtime@7.11.2
      • babel-jest@26.4.0
      • concurrently@5.3.0
      • core-js@3.6.5
      • global-agent@2.1.12
      • husky@4.2.5
      • jest@26.2.2
      • jest-image-snapshot@4.1.0
      • jest-junit@11.1.0
      • jest-trx-results-processor@2.0.3
      • lerna@3.22.1
      • lint-staged@10.2.13
      • prettier@2.0.5
      • serve@11.3.2
      • serve-handler@6.1.3
      • Removed unused package @azure/storage-blob@12.1.0
    • Other packages
      • @babel/cli@7.10.5
      • @babel/core@7.11.0
      • @babel/plugin-proposal-class-properties@7.10.4
      • @babel/plugin-proposal-object-rest-spread@7.11.0
      • @babel/plugin-transform-runtime@7.11.0
      • @babel/preset-env@7.11.0
      • @babel/preset-react@7.10.4
      • @babel/preset-typescript@7.10.4
      • @types/node@14.6.0
      • @types/react@16.9.47
      • @typescript-eslint/eslint-plugin@3.10.1
      • @typescript-eslint/parser@3.10.1
      • babel-jest@26.2.2
      • concurrently@5.3.0
      • copy-webpack-plugin@6.0.3
      • core-js@3.6.5
      • cross-env@7.0.2
      • css-loader@4.2.0
      • eslint-plugin-prettier@3.1.4
      • eslint-plugin-react-hooks@4.1.0
      • eslint-plugin-react@7.20.6
      • eslint@7.7.0
      • global-agent@2.1.12
      • globalize-compiler@1.1.1
      • html-webpack-plugin@4.3.0
      • http-proxy-middleware@1.0.5
      • jest@26.2.2
      • node-dev@5.2.0
      • prettier@2.1.1
      • pug@3.0.0
      • serve@11.3.2
      • simple-update-in@2.2.0
      • source-map-loader@1.0.2
      • terser-webpack-plugin@4.1.0
      • typescript@4.0.2
      • webpack-cli@3.3.12
      • webpack-stats-plugin@0.3.2
      • webpack@4.44.1
  • Production dependencies
    • @babel/plugin-proposal-async-generator-functions@7.10.5
    • @babel/runtime@7.11.2
    • @babel/standalone@7.11.0
    • abort-controller-es5@1.2.0
    • botframework-directlinejs@0.13.0
    • core-js@3.6.5
    • event-iterator@2.0.0
    • event-target-shim-es5@1.2.0
    • expect@25.5.0
    • globalize@1.5.0
    • markdown-it-attrs-es5@1.2.0
    • markdown-it-attrs@3.0.3
    • markdown-it@11.0.0
    • math-random@2.0.1
    • memoize-one@5.1.1
    • mime@2.4.6
    • on-error-resume-next@1.1.0
    • p-defer@3.0.0
    • p-defer-es5@1.2.1
    • react-say@2.0.2-master.ee7cd76
    • react-scroll-to-bottom@3.0.1-master.9e2b9d8
    • sanitize-html@1.27.4
    • simple-update-in@2.2.0
    • url-search-params-polyfill@8.1.0
    • web-speech-cognitive-services@7.0.2-master.6004e4b
    • whatwg-fetch@3.4.0

Samples

• Added Content Security Policy sample, by @compulim, in PR #3443
• Update create-react-app-based samples to resolve p-defer as peer dependency, by @compulim, in PR #3457
• Bump encoding@0.1.13 in 06.recomposing-ui/c.smart-display, by @compulim, in PR #3458