apostrophecms/sanitize-html
### [`v2.5.1`](https://togithub.com/apostrophecms/sanitize-html/blob/master/CHANGELOG.md#251-2021-09-14-)
[Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/2.5.0...2.5.1)
- The `allowedScriptHostnames` and `allowedScriptDomains` options now implicitly purge the inline content of all script tags, not just those with `src` attributes. This behavior was already strongly implied by the fact that they purged it in the case where a `src` attribute was actually present, and is necessary for the feature to provide any real security. Thanks to Grigorii Duca for pointing out the issue.
Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box.
This PR contains the following updates:
2.5.0->2.5.1Release Notes
apostrophecms/sanitize-html
### [`v2.5.1`](https://togithub.com/apostrophecms/sanitize-html/blob/master/CHANGELOG.md#251-2021-09-14-) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/2.5.0...2.5.1) - The `allowedScriptHostnames` and `allowedScriptDomains` options now implicitly purge the inline content of all script tags, not just those with `src` attributes. This behavior was already strongly implied by the fact that they purged it in the case where a `src` attribute was actually present, and is necessary for the feature to provide any real security. Thanks to Grigorii Duca for pointing out the issue.Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.