A sample app for the Retrieval-Augmented Generation pattern running in Azure, using Azure AI Search for retrieval and Azure OpenAI large language models to power ChatGPT-style and Q&A experiences.
Added better configurability for comment scrubbing default behavior
Added better hardening against Prototype Pollution attacks, thanks @kevin-mizu
Added better handling and readability of the nodeType property, thanks @ssi02014
Fixed some smaller issues in README and other documentation
DOMPurify 3.1.2
Addressed and fixed a mXSS variation found by @kevin-mizu
Addressed and fixed a mXSS variation found by Adam Kues of Assetnote
Updated tests for older Safari and Chrome versions
DOMPurify 3.1.1
Fixed an mXSS sanitiser bypass reported by @icesfont
Added new code to track element nesting depth
Added new code to enforce a maximum nesting depth of 255
Added coverage tests and necessary clobbering protections
Note that this is a security release and should be upgraded to immediately. Please also note that further releases may follow as the underlying vulnerability is apparently new and further variations may be discovered.
DOMPurify 3.1.0
Added new setting SAFE_FOR_XML to enable better control over comment scrubbing
Updated README to warn about happy-dom not being safe for use with DOMPurify yet
Updated the LICENSE file to show the accurate year number
Updated several build and test dependencies
DOMPurify 3.0.11
Fixed another conditional bypass caused by Processing Instructions, thanks @Ry0taK
Fixed the regex for HTML Custom Element detection, thanks @AlekseySolovey3T
DOMPurify 3.0.10
Fixed two possible bypasses when sanitizing an XML document and later using it in HTML, thanks @Slonser
Bumped up some build and test dependencies
DOMPurify 3.0.9
Fixed a problem with proper detection of Custom Elements, thanks @kevin-mizu
Refactored the hasOwnProperty logic, thanks @ssi02014
Removed a superfluous console.warn making HappyDom happier, thanks @HugoPoi
Modernized some of the demo hooks for better looks, thanks @Steb95
Check for document existence when checking startViewTransition (#11544)
Change the react-router-dom/server import back to react-router-dom instead of index.ts (#11514)
Updated dependencies:
@remix-run/router@1.16.1
react-router@6.23.1
6.23.0
Minor Changes
Add a new unstable_dataStrategy configuration option (#11098)
This option allows Data Router applications to take control over the approach for executing route loaders and actions
The default implementation is today's behavior, to fetch all loaders in parallel, but this option allows users to implement more advanced data flows including Remix single-fetch, middleware/context APIs, automatic loader caching, and more
dependabot[bot]
commented
2 weeks ago
Bumps the node-packages group with 18 updates in the /app/frontend directory:
2.0.62.0.178.112.58.118.69.37.39.53.09.1.612.0.23.0.63.1.53.0.43.0.518.2.018.3.118.2.3418.3.318.2.018.3.118.2.1418.3.06.18.06.23.11.0.71.2.00.20.20.23.24.1.14.3.03.0.33.3.05.2.25.4.515.5.915.5.134.5.35.2.12Updates
@azure/msal-reactfrom 2.0.6 to 2.0.17Release notes
Sourced from
@azure/msal-react's releases.... (truncated)
Commits
28a0441Bump package versions86619c7Update E2E Test Templates (#7103)3256445Bump axios from 0.21.4 to 1.7.2 (#7125)1ad0936Angular 18 support changes (#7124)0db4239Supports caching in NAA apps (#7072)adaa895Support CreatePCA pattern for NAA apps (#7112)89ff611Instrument preflight check errors (#7113)8d19143API for Managed Identity to detect the current environment (#7093)e1c27faMSAL Angular samples e2e-test-utils update (#7109)063ef3dUpdate msal-angular v17 README.md (#7108)Updates
@azure/msal-browserfrom 3.10.0 to 3.15.0Release notes
Sourced from
@azure/msal-browser's releases.... (truncated)
Commits
28a0441Bump package versions86619c7Update E2E Test Templates (#7103)3256445Bump axios from 0.21.4 to 1.7.2 (#7125)1ad0936Angular 18 support changes (#7124)0db4239Supports caching in NAA apps (#7072)adaa895Support CreatePCA pattern for NAA apps (#7112)89ff611Instrument preflight check errors (#7113)8d19143API for Managed Identity to detect the current environment (#7093)e1c27faMSAL Angular samples e2e-test-utils update (#7109)063ef3dUpdate msal-angular v17 README.md (#7108)Updates
@fluentui/reactfrom 8.112.5 to 8.118.6Release notes
Sourced from
@fluentui/react's releases.Commits
26e0962applying package updatesa96863bfix(Timepicker-compat): clearIcon not working in freeform (#31324)3be2219chore: re-enable lint rule (#31459)07a8045feat(react-tag-picker): adds text property to TagPickerOption (#31474)fe9c351feat(recipes): create package with initial implementation (moved from /apps) ...555e0a4applying package updatese5b6146applying package updatesbabf7b4chore: revert globals changes (#31470)db8e9c5(web-components) UseElementInternalsfor TextInput elements (#31201)d8d3252chore:(docs) Update and migrate component implementation guide (#31398)Updates
@fluentui/react-componentsfrom 9.37.3 to 9.53.0Release notes
Sourced from
@fluentui/react-components's releases.... (truncated)
Commits
0827e48applying package updates03599d6applying package updates10e6758applying package updatesf20861cUpdate IconDirectionContextProvider import to import from specific path (#31006)410b743fix: make type-check task run with --noEmit and return only void Promise on s...4833b3echore: migrate .shorthands() [teams-prg & xc-uxe] (#31458)7a2367bchore(Dialog): migrate to new motion APIs (#31380)78e136dchore: migrate .shorthands() [cxe-red] (#31449)b5071e6fix: ExcludingFocusZonesinside ofContextualMenusfromtabster's focu...9232905chore: migrate .shorthands() [cxe-prg] (#31448)Updates
@fluentui/react-iconsfrom 2.0.221 to 2.0.242Commits
Updates
markedfrom 9.1.6 to 12.0.2Release notes
Sourced from marked's releases.
... (truncated)
Commits
c6a98eachore(release): 12.0.2 [skip ci]e9f0eedfix: fix Setext continuation in blockquote (#3257)a90223bchore(deps-dev): Bump@typescript-eslint/eslint-pluginfrom 7.4.0 to 7.6.0 (#...7757f96chore(deps-dev): Bump typescript from 5.4.4 to 5.4.5 (#3261)609b65cchore(deps-dev): Bump@arethetypeswrong/clifrom 0.15.2 to 0.15.3 (#3258)dfa835echore(deps-dev): Bump rollup from 4.14.1 to 4.14.3 (#3259)f0fb744chore(deps-dev): Bump semantic-release from 23.0.6 to 23.0.7 (#3255)924130dchore(deps-dev): Bump@semantic-release/githubfrom 10.0.2 to 10.0.3 (#3254)8cdb7cachore(deps-dev): Bump rollup from 4.13.2 to 4.14.1 (#3253)1cc9eb2chore(deps-dev): Bump typescript from 5.4.3 to 5.4.4 (#3252)Updates
dompurifyfrom 3.0.6 to 3.1.5Release notes
Sourced from dompurify's releases.
... (truncated)
Commits
6676133Merge pull request #964 from cure53/main16a46dechore: Preparing 3.1.5 release7cf4890chore: Experimentally removing the depth counter logic as we have better defe...bfeb9a9see #9617517e9cMerge pull request #960 from cure53/main3ddb7f2chore: Preparing 3.1.4 release4486f91test: Experimentally changed TEST_PROBE_ONLY to not cover 2.x1223487fix: Added MSIE number check fix to main as wella34860bMerge pull request #957 from Gigabyte5671/popover-api96bf0d4Merge pull request #956 from MortenHofft/patch-1Updates
@types/dompurifyfrom 3.0.4 to 3.0.5Commits
Updates
reactfrom 18.2.0 to 18.3.1Release notes
Sourced from react's releases.
Changelog
Sourced from react's changelog.
Commits
f1338f8ExportReact.actfrom 18.3d6c42f7Bump to 18.3.173bfaa1Turn on key spread warning in jsx-runtime for everyone (#25697)c2a246eTurn on string ref deprecation warning for everybody (not codemoddable) (#25383)2cfb474Bump version from 18.2 to 18.3Maintainer changes
This version was pushed to npm by react-bot, a new releaser for react since your current version.
Updates
@types/reactfrom 18.2.34 to 18.3.3Commits
Updates
react-domfrom 18.2.0 to 18.3.1Release notes
Sourced from react-dom's releases.
Changelog
Sourced from react-dom's changelog.
Commits
d6c42f7Bump to 18.3.18a015b6Add deprecation warning for unmountComponentAtNodec3b2839Add deprecation warning for findDOMNoded4ea75dReactDOMTestUtils deprecation warnings7548c01DeprecaterenderToStaticNodeStream(#28872) (#28874)5894232Enable warning for defaultProps on function components for everyone (#25699)c2a246eTurn on string ref deprecation warning for everybody (not codemoddable) (#25383)2cfb474Bump version from 18.2 to 18.3Maintainer changes
This version was pushed to npm by react-bot, a new releaser for react-dom since your current version.
Updates
@types/react-domfrom 18.2.14 to 18.3.0Commits
Updates
react-router-domfrom 6.18.0 to 6.23.1Release notes
Sourced from react-router-dom's releases.
... (truncated)
Changelog
Sourced from react-router-dom's changelog.
... (truncated)
Commits
aef5c4achore: Update version for release (#11551)26bc8e2chore: Update version for release (pre) (#11545)031478dAdd defensive window.document check when checking for startViewTransition (#1...9651465chore: Update version for release (pre) (#11516)fdff9ddFix react-router-dom/server index.ts import from pnpm migration (#11514)82a3a77chore: Update version for release (#11486)8a20f32chore: Update version for release (pre) (#11387)88ec71achore: Update version for release (pre) (#11379)12afb2eMigrate to pnpm (#11358)c7dd3d3Data Strategy Configuration (#11098)Updates
ndjson-readablestreamfrom 1.0.7 to 1.2.0Changelog
Sourced from ndjson-readablestream's changelog.
Commits
Updates
schedulerfrom 0.20.2 to 0.23.2Commits
Maintainer changes
This version was pushed to npm by react-bot, a new releaser for scheduler since your current version.
Updates
@types/dompurifyfrom 3.0.4 to 3.0.5Commits
Updates
@types/reactfrom 18.2.34 to 18.3.3Commits
Updates
@types/react-domfrom 18.2.14 ...Description has been truncated