URI.js v1.19.7 Release Notes

Release Date: 2021-07-14 // 3 months ago
    • ๐Ÿ”’ SECURITY fixing URI.parseQuery() to prevent overwriting __proto__ in parseQuery() - disclosed privately by @NewEraCracker
    • ๐Ÿ”’ SECURITY fixing URI.parse() to handle variable amounts of \ and / in scheme delimiter as Node and Browsers do - disclosed privately by ready-research via https://huntr.dev/
    • โœ‚ removed obsolete build tools
    • โšก๏ธ updated jQuery versions (verifying compatibility with 1.12.4, 2.2.4, 3.6.0)

Previous changes from v1.19.6

    • ๐Ÿ”’ SECURITY fixing URI.parse() to rewrite \ in scheme delimiter to / as Node and Browsers do - disclosed privately by Yaniv Nizry from the CxSCA AppSec team at Checkmarx