[Snyk] Upgrade magnific-popup from 1.1.0 to 1.2.0

[dyd-x]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade magnific-popup from 1.1.0 to 1.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.

• The recommended version was released on 23 days ago.

Release notes

Package name: magnific-popup

• 1.2.0 - 2024-06-08
  

  This update fixes jQuery deprecated functions and potential security vulnerabilities if you aren't fully sanitizing user input (for example, if your users can create HTML elements with attributes that contain non-sanitized HTML).

  • Updated functions that are deprecated by jQuery 3.7.1+
  • Added options allowHTMLInStatusIndicator, allowHTMLInTemplate that disable HTML within the loading indicator and fields like image title. Options are disabled by default (by default HTML is not allowed). If you want to make it work as before enable these:

  $('.gallery').magnificPopup({
    allowHTMLInStatusIndicator: true,
    allowHTMLInTemplate: true,
    // ...
  });

  You can grab the latest version from dist/ directory https://github.com/dimsemenov/Magnific-Popup/tree/master/dist

• 1.1.0 - 2016-02-20
  
  • Dropped built-in fast-click support in favor of modern touch-action property. If you still need it in browsers that have 300ms delay, use FastClick by FT Labs.
  • Dropped basic IE7 support (if you still need to support old IE, keep using the previous version).
  • Sanitized attributes with jQuery when replacing img element (#770 via @ makkaq).
  • Added 'style' property to package.json (#816 via @ jonscottclark).
  • Removed vendor prefixes for box-sizing and box-shadow (via @ chicagoing).

from magnific-popup GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs