Skip to content

5.22.0 (2022-11-15)

Choose a tag to compare

View all tags
@willdurand willdurand released this 15 Nov 16:19
· 1697 commits to master since this release
5.22.0
0a5b748
This commit was signed with the committer’s verified signature.
willdurand William Durand
GPG key ID: 804B6263A7476675
Verified
Learn about vigilant mode.

Main changes

  • Fixed: CSP should ignore repeated directives (#4573)
  • Fixed: simplify CSP validation logic (#4580)
  • Fixed: array pattern with omitted element should not cause the file to be interpreted as script (#4582)
  • Fixed: accept 'self' in script-src beyond the first part (#4592)
  • Fixed: Do not emit duplicate CSP warnings (#4593)
  • Fixed: Correctly detect insecure CSP when default-src is missing. (#4594)
  • Fixed: Remove unsupported values from CSP_KEYWORD_RE (#4595)

dependencies

  • Updated: dependency @mdn/browser-compat-data to v5.2.15 (#4589)
  • Updated: dependency postcss to v8.4.19 (#4586)

dev dependencies

  • Updated: dependency webpack to v5.75.0 (#4585)
  • Updated: dependency jest to v29.3.1 (#4584)
Assets 2
Loading