URI.js changelog

Changelog History

Page 1

• v1.19.11 Changes

  April 03, 2022

  • 🔒 SECURITY fixing URI.parse() handle excessive slashes in scheme-relative URLs - disclosed by zeyu2001 via https://huntr.dev/
  • 🔒 SECURITY fixing URI.parse() remove \r (CR), \n, (LF) \t (TAB) - disclosed by haxatron via https://huntr.dev/

• v1.19.10 Changes

  March 05, 2022

  • 🔒 SECURITY fixing URI.parse() handle excessive colons in protocol delimiter - disclosed by huydoppa via https://huntr.dev/

• v1.19.9 Changes

  March 03, 2022

  • 🔒 SECURITY fixing URI.parse() handle leading whitespace - disclosed by p0cas via https://huntr.dev/

• v1.19.8 Changes

  February 15, 2022

  • 🔒 SECURITY fixing URI.parse() treat scheme case-insenstivie when handling excessive slackes and backslashes - PR #412 by r0hanSH

• v1.19.7 Changes

  July 14, 2021

  • 🔒 SECURITY fixing URI.parseQuery() to prevent overwriting __proto__ in parseQuery() - disclosed privately by @NewEraCracker
  • 🔒 SECURITY fixing URI.parse() to handle variable amounts of \ and / in scheme delimiter as Node and Browsers do - disclosed privately by ready-research via https://huntr.dev/
  • ✂ removed obsolete build tools
  • ⚡️ updated jQuery versions (verifying compatibility with 1.12.4, 2.2.4, 3.6.0)

• v1.19.6 Changes

  February 13, 2021

  • 🔒 SECURITY fixing URI.parse() to rewrite \ in scheme delimiter to / as Node and Browsers do - disclosed privately by Yaniv Nizry from the CxSCA AppSec team at Checkmarx

• v1.19.5 Changes

  December 30, 2020

  • ⬇️ dropping jquery.URI.js from minified bundle accidentally added since v1.19.3 - Issue #404

• v1.19.4 Changes

  December 23, 2020

  • 🔒 SECURITY fixing URI.parseAuthority() to rewrite \ to / as Node and Browsers do - followed up to by alesandroortiz in PR #403, relates to Issue #233

• v1.19.3 Changes

  December 20, 2020

  • 🔒 SECURITY fixing URI.parseAuthority() to rewrite \ to / as Node and Browsers do - disclosed privately by alesandroortiz, relates to Issue #233

• v1.19.2 Changes

  October 20, 2019

  • 🛠 fixing URI.build() to properly handle relative paths when a scheme is given - Issue #387
  • 🛠 fixing URI.buildQuery() to properly handle empty param name - Issue #243, PR #383
  • 👌 support Composer PR #386

• 1
• 2
• 3
• 4
• 5
• Next ›
• Last »