v1.3.4

What's Changed

• feat: support for the new escaping tag function "e" and "escape" by @JacopoPatroclo in #50

New Contributors

• @JacopoPatroclo made their first contribution in #50

Full Changelog: v1.3.3...v1.3.4

v1.3.3

What's Changed

• Removed duplicated diagnostics
• Fixed latest @kitajs/html children xss bug.

Full Changelog: v1.3.2...v1.3.3

v1.3.2

What's Changed

• Added full support for arrays (#27)
• Improved tests in general
• Ignore boolean in binary operators (#24)

Full Changelog: v1.3.1...v1.3.2

v1.3.1

What's Changed

• Added automated test against typescript language server.
• Fixed false XSS warning on parenthesized jsx tags (#24)

Full Changelog: v1.3.0...v1.3.1

v1.3.0

Important Changes

• Fixed package.json bin field
• <script> tags are ignored by default in #8
• Binary and ternary operations are parsed individually in #7
• Updated dependencies
• Typescript compliant CLI diagnostics
• Added -s option to emit simple diagnostics
• Faster file exclusion
• Shorter error messages and added links to oficial documentation.
• Better arrays/method calls detections.

New Contributors

• @dependabot made their first contribution in #6

Full Changelog: v1.2.0...v1.3.0

v1.2.0

Important Changes

• ⚠️ Fixed XSS vulnerabilities without warnings in #2
• Correct JSX.Element and Html.Children usages in #1
• Improved multiple documentation cases.

Full Changelog: v1.1.1...v1.2.0

v1.1.1

Important Changes

• Added CLI tool to automate xss tests inside CI pipelines. See readme for more details.
• Fixed bin path

Full Changelog: v1.1.0...v1.1.1

v1.1.0

Important Changes

• Added CLI tool to automate xss tests inside CI pipelines. See readme for more details.

Full Changelog: v1.0.2...v1.1.0

v1.0.2

Important changes

• Added support for Html.escapeHtml calls
• Added support for XSS inside components

Full Changelog: v1.0.1...v1.0.2

v1.0.1

Important Changes

• Fixed safe attribute not working.

Full Changelog: v1.0.0...v1.0.1