Skip to content

[4.9.1] - 2020-06-09
Compare
Choose a tag to compare
@compulim compulim released this 10 Jun 17:42
· 167 commits to master since this release
v4.9.1
69d0afb
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Subresource integrity

<script
  crossorigin="anonymous"
  integrity="sha384-Q1EIOjL3Bf1TgDSIVoQ0+I5X3P5LX+k1OIJPaVmNOkUjXNlSoR1bkAPJZNuK54x2"
  src="https://cdn.botframework.com/botframework-webchat/4.9.1/webchat.js"
></script>

<script 
  crossorigin="anonymous"
  integrity="sha384-iUFVOYPvwT6u1UqxL7JaKPyO1VGrqJ0zg/fD+g1QKLH3xi6MzFyYtUKQM51LHuob"
  src="https://cdn.botframework.com/botframework-webchat/4.9.1/webchat-es5.js"
></script>

<script 
  crossorigin="anonymous"
  integrity="sha384-GM+djQ1F0fU5UT7u/+8oFgNtU9I/eJZkjgBNVmCjNkMxhG30zzxCah0U/5McEpvv"
  src="https://cdn.botframework.com/botframework-webchat/4.9.1/webchat-minimal.js"
></script>

Changelog

Breaking changes

  • Affecting Adaptive Cards, legacy cards and suggested actions
    • For openUrl card action, we are now whitelisting the URL scheme using the same whitelist from the default Markdown + sanitize engine, which includes data, http, https, ftp, mailto, sip, and tel
    • To whitelist a different set of URL schemes, please implement the card action middleware to override this behavior

Added

Fixed

  • Fixes #1340. Card container should not be focusable if they do not have tapAction, by @compulim in PR #3193
  • Fixed #3196. Cards with tapAction should be executable by ENTER or SPACEBAR key, by @compulim in PR #3197
  • Fixed #3203. "New messages" button should be narrated by assistive technology, by @compulim in PR #3204
  • Fixed #3217. Make sure rel="noopener noreferrer is not sanitized, by @compulim in PR #3220
  • Fixed #3223. Tap an openUrl card action should open URL in a new tab with noopener noreferrer set, by @compulim in PR #3224

Changed

Samples

Assets 10
Loading