5.19.4

Security fix

The XSS fix in this release could potentially cause issues if you were using the translateString feature to render HTML. Switching to Markdown will solve your problems.

@rjsf/core

• Fix XSS when rendering schema validation errors #4254
  • NOTE: This will have potential consequences if you are using the translateString feature and are trying to render HTML. Switching to Markdown will solve your problems.

@rjsf/utils

• Updated the ValidatorType interface to add an optional reset?: () => void prop that can be implemented to reset a validator back to initial constructed state
  • Updated the ParserValidator to provide a reset() function that clears the schema map
• Also updated the default translatable string to use Markdown rather than HTML tags since we now render them with Markdown

@rjsf/validator-ajv8

• Updated the AJV8Validator to implement the reset() function to remove cached schemas in the ajv instance

Dev / docs / playground

• Updated the Validator dropdown to add AJV8 (discriminator) which sets the AJV validator discriminator option to true to support testing schemas with that option in them