Sourced from jsonpath-plus's releases.
v7.2.0
7.2.0 (2022-09-02)
- perf: optimize walk method by 10%-34% (
@jacobroschen
)- chore: add types to exports field (
@awlayton
)
Sourced from jsonpath-plus's changelog.
10.1.0
- feat: add typeof operator to safe script
10.0.7
- fix(security): prevent
constructor
access- docs: add security policy file
10.0.6
- fix(security): prevent
call
/apply
invocation ofFunction
10.0.5
- fix: remove overly aggressive disabling of native functions but disallow
__proto__
10.0.4
- fix(security): further prevent binding of Function calls which may evade detection
10.0.3
- fix(security): prevent binding of Function calls which may evade detection
10.0.2
- fix(security): prevent Function calls outside of member expressions
10.0.1
- fix(security): prohibit
Function
in "safe" vm10.0.0
BREAKING CHANGES:
Require Node 18+
fix(security): use safe vm by default in Node
chore: bump jsep, devDeps. and lint
9.0.0
BREAKING CHANGES:
Removes
preventEval
property. Prefereval: false
instead.Changed behavior of
eval
property. In the browser,eval
/Function
won't be used by default to evaluate expressions. Instead, we'll safely evaluate using a subset of JavaScript. To resume using unsafe eval in the browser, pass in the optioneval: "native"
feat: add safe eval for browser and
eval
option (#185) (@80avin
)feat: add
ignoreEvalErrors
property (@80avin
)
... (truncated)
93612a3
chore: bump version4a16cbd
feat: add undefined, null literals to safe scriptf119fe3
feat: add typeof operator to safe scriptb70aa71
fix(security): prevent constructor
access in safe vm763ada0
fix(security): prevent call
/apply
invocation
of Function
98a6b22
fix: remove overly aggressive disabling of native functions but disallow
`__p...30194c7
fix(security): further prevent binding of Function calls which may evade
dete...eac48fe
fix(security): prevent binding of Function calls which may evade
detection34a836b
chore: bump version5a22e3f
fix(security): prevent Function calls outside of member expressions89e702c
chore(release): 1.19.2 [skip ci]827b034
chore(deps): fix lock file8ec328f
fix(core): require new formats version (#2725)92401c0
chore(repo): fix circle ci config42f7334
chore(repo): fix circle ci configfbd3e7c
chore(repo): fix circle ci config3088b91
chore(repo): make windows resource class large87a90b3
feat(cli): trigger releaseb73d5e8
feat(core): trigger release01561d3
chore(release): 1.21.0 [skip ci]