OkadaGenya 9d13f6ff26 fix: sanitize <script> in __FRSH_STATE state (#739) ...

This commit escapes `<` `>` and related characters in the serialized state that is encoded into the `<script id=__FRSH_STATE>` tag. This prevents XSS attack occuring through injection of a `</script>` string in island props.

2022-09-12 17:33:02 +02:00

..

custom_static

feat: add support for custom static folder in FreshOptions (#626)

2022-09-05 12:00:47 +00:00

islands

feat: support JSX automatic mode (#610)

2022-08-26 11:03:00 +02:00

routes

fix: sanitize <script> in __FRSH_STATE state (#739)

2022-09-12 17:33:02 +02:00

static

feat: add support for static asset caching (#133)

2022-03-16 16:49:47 +01:00

deno.json

feat: support JSX automatic mode (#610)

2022-08-26 11:03:00 +02:00

dev.ts

chore: remove --no-check flags (#259)

2022-06-20 12:45:48 +02:00

fresh.gen.ts

fix: sanitize <script> in __FRSH_STATE state (#739)

2022-09-12 17:33:02 +02:00

import_map.json

chore: update preact + preact-render-to-string (#762)

2022-09-12 14:53:32 +02:00

main.ts

feat: experimental support for Deno.serve (#681)

2022-09-07 23:04:45 +00:00

options.ts

BREAKING: make render fn an option on start (#260)

2022-06-20 13:40:23 +02:00