MapLibre GL JS v6.4.1

v6.4.1
Fixed 2
  • Fix DOM.sanitize leaving dangerous attributes behind when multiple consecutive attributes are present by iterating over a copy of the attributes list instead of the live NamedNodeMap
  • Give custom layers the live globe transition in CustomRenderMethodInput.defaultProjectionData.projectionTransition instead of using a hardcoded value of 1

From MapLibre GL JS

🐞 Bug fixes
  • Fix DOM.sanitize leaving dangerous attributes behind when multiple consecutive attributes are present. Iterating the live NamedNodeMap from elem.attributes while calling removeAttribute skipped the attribute directly after a removed one, so a second dangerous attribute (for example an ontoggle on a <details open> element) could survive sanitisation and later execute (#8189) (by @0xKirisame)
  • Give custom layers the live globe transition in CustomRenderMethodInput.defaultProjectionData.projectionTransition, which was hardcoded to 1 for the whole globe/mercator transition, so a custom layer jumped straight to the fully bent globe while every other layer eased (#8169) (by @mondsichtung)
View original

Upgraded? How did it go?

Discussion