5.55.7
Fixed 1
- Move Svelte runtime properties to symbols
Security 3
- Prevent XSS on hydratable from user contents
- Disallow empty attribute names during SSR
- Harden regex
Patch Changes
-
fix: prevent XSS on
hydratablefrom user contents (a16ebc67bbcf8f708360195687e1b2719463e1a4) -
chore: bump devalue (#18219)
-
fix: disallow empty attribute names during SSR (
547853e2406a2147ad7fb5ffeba95b01bd9642da) -
fix: harden regex (
d2375e2ebcab5c88feb5652f1a9d621b8f06b259) -
fix: move Svelte runtime properties to symbols (
e1cbbd96441e82c9eb8a23a2903c0d06d3cda991)