Patch releases of elm/html and elm/virtual-dom

Request Feedback
1

New releases of elm/html and elm/virtual-dom packages are available with srcdoc attribute marked as deprecated and stricter checks on incoming JSON. These releases has no API changes and you can safely update your applications and libraries.

8 Likes
2

Context for elm/html: Iframe's srcDoc allow arbitrary scripts which can result in unsafe packages published · Issue #246 · elm/html · GitHub

Context for elm/virtual-dom: elm/virtual-dom javascript: URL vulnerability · GitHub

6 Likes
3

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.