Skip to content
This repository has been archived by the owner on Jul 15, 2019. It is now read-only.

Releases: YahooArchive/xss-filters

Refreshed devDependencies and resolved build issues

12 Sep 19:58
Compare
Choose a tag to compare
  • updated devDependencies
  • fixed uglify settings to preserve \x0B for IE8
  • updated email addresses of authors
  • updated travis nodejs versions
  • updated npm deploy api key

Enhanced css filters for IE

29 Jul 10:47
Compare
Choose a tag to compare
  • enhanced css filters for IE
  • blacklisted x-schema protocol

Fix IE compatibility issues on splicing arguments

10 Jul 10:14
Compare
Choose a tag to compare
v1.2.4

Fix IE compatibility issues on splicing arguments

Fixed blacklist protocol check and unquoted filters

07 Jul 13:38
Compare
Choose a tag to compare
v1.2.3

fixed blacklist protocol check and unquoted filters

Support CSS Filtering in Private Filters

03 Jun 06:08
Compare
Choose a tag to compare
  • Support a new set of css private filters for secure-handlebars

Improved Compatibility with Older Browsers

29 May 02:58
Compare
Choose a tag to compare
release as version 1.1.2

resolve a cross-browser compatibility issue (array.indexOf() is not
supported by old IEs)

Improved Security and Compatibility with Older Browsers

26 Mar 10:36
Compare
Choose a tag to compare

Improved Security and Compatibility with Older Browsers

26 Mar 10:31
Compare
Choose a tag to compare
  • null handling in yc() and yavu()
  • yavu() optimized and caught all null cases
  • exposed yup() to retrieve protocol (some false positives for &#0, but acceptable)
  • yubl() updated to prefix x- before javascript:, vbscript:, data:, and mhtml:

Improved Security and Compatibility with Older Browsers

21 Mar 04:46
Compare
Choose a tag to compare
  • treated grave accent ` handling in y() and yavu()
  • escaped tab and newline in numeric values ( instead of and instead of ) for compatibility with older browsers
  • improved speed of yubl() based on http://jsperf.com/lazy-regexp-parsing
  • code cleanup to shrink space

Security fix

09 Mar 09:49
Compare
Choose a tag to compare
  • fixed: check : too, otherwise could bypass yubl()