[Release] Version packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@udecode/[email protected]

Patch Changes

• d30471cb19577e53c20944ab66eab2a7ef3b3ad2 by @12joan – Mitigate XSS in element.attributes by requiring all attribute names to be allowlisted in the node.dangerouslyAllowAttributes plugin configuration option.

  Migration:

  For each plugin that needs to support passing DOM attributes using element.attributes, add the list of allowed attributes to the node.dangerouslyAllowAttributes option of the plugin.

  const ImagePlugin = createPlatePlugin({
    key: 'image',
    node: {
      isElement: true,
      isVoid: true,
      dangerouslyAllowAttributes: ['alt'],
    },
  });

  To modify existing plugins, use the extend method as follows:

  const MyImagePlugin = ImagePlugin.extend({
    node: {
      dangerouslyAllowAttributes: ['alt'],
    },
  });

  WARNING: Improper use of dangerouslyAllowAttributes WILL make your application vulnerable to cross-site scripting (XSS) or information exposure attacks. Ensure you carefully research the security implications of any attribute before adding it. For example, the src and href attributes will allow attackers to execute arbitrary code, and the style and background attributes will allow attackers to leak users' IP addresses.

@udecode/[email protected]

Patch Changes

• f26ed56053b14e697fea2e6a7e33a73ce28593e4 by @12joan – Add the target attribute to dangerouslyAllowAttributes for LinkPlugin

@udecode/[email protected]

Patch Changes

• d30471cb19577e53c20944ab66eab2a7ef3b3ad2 by @12joan – Add the following attributes to dangerouslyAllowAttributes:

  • ImagePlugin: alt, width, height
  • VideoPlugin: width, height

@udecode/[email protected]

Patch Changes

• f26ed56053b14e697fea2e6a7e33a73ce28593e4 by @12joan – Add the colspan and rowspan attributes to dangerouslyAllowAttributes for TableCellPlugin and TableCellHeaderPlugin

@udecode/[email protected]

@udecode/[email protected]

@udecode/[email protected]

@udecode/[email protected]

@udecode/[email protected]

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
plate	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Sep 20, 2024 0:32am

[codesandbox]

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview