You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
With the update to v1.0.14 I noticed that with the stripIgnoreTag: true option set, strings containing < but no actual HTML began to be stripped at the point of the < character. Example, "x < 12" at v1.0.13 would be sanitized to "x < 12", but at v1.0.14 that same string would be sanitized to "x ".
Is this new behavior in v1.0.14 fixing prior incorrect behavior of stripIgnoreTag, or is it an unintended regression? Based on past behavior, it looks like a regression, but I would like to understand this as it does cause quite a big change when processing strings that do not contain actual HTML tags.
This behavior change seems to be caused by this commit: 72844dd
Demo
I have created a CodePen where you can switch between v1.0.13 and v1.0.14 and see the change in behavior visually.
The text was updated successfully, but these errors were encountered:
Overview
With the update to v1.0.14 I noticed that with the
stripIgnoreTag: true
option set, strings containing<
but no actual HTML began to be stripped at the point of the<
character. Example,"x < 12"
at v1.0.13 would be sanitized to"x < 12"
, but at v1.0.14 that same string would be sanitized to"x "
.Is this new behavior in v1.0.14 fixing prior incorrect behavior of
stripIgnoreTag
, or is it an unintended regression? Based on past behavior, it looks like a regression, but I would like to understand this as it does cause quite a big change when processing strings that do not contain actual HTML tags.This behavior change seems to be caused by this commit: 72844dd
Demo
I have created a CodePen where you can switch between v1.0.13 and v1.0.14 and see the change in behavior visually.
The text was updated successfully, but these errors were encountered: