« Changelog History


URI.js v1.19.8 Release Notes

Release Date: 2022-02-15 // 3 months ago
    • 🔒 SECURITY fixing URI.parse() treat scheme case-insenstivie when handling excessive slackes and backslashes - PR #412 by r0hanSH

Previous changes from v1.19.7

    • 🔒 SECURITY fixing URI.parseQuery() to prevent overwriting __proto__ in parseQuery() - disclosed privately by @NewEraCracker
    • 🔒 SECURITY fixing URI.parse() to handle variable amounts of \ and / in scheme delimiter as Node and Browsers do - disclosed privately by ready-research via https://huntr.dev/
    • ✂ removed obsolete build tools
    • ⚡️ updated jQuery versions (verifying compatibility with 1.12.4, 2.2.4, 3.6.0)