Skip to content

Release 9.8.0-alpha.3

Pre-release
Pre-release
Compare
Choose a tag to compare
@thet thet released this 07 Dec 13:17
· 547 commits to master since this release

9.8.0-alpha.3 (2022-12-07)

Bug Fixes

  • pat-clone-code: Fix a Content-Security-Policy problem. (e38f987)Do not use dom.template for the wrapper template to not get caught by
    the browser's Content-Security-Policy. If set, a unsafe-eval error would
    be thrown and the pattern refuse to run.

Breaking Changes

  • pat-validation: Remove error-template option. (78c544b)This is a breaking change.

Due to a Content-Security-Policy problem with dom.template when
unsafe-eval is not set - which you wouldn't set if possible - we had to
remove the error-template parameter. Instead the template is now defined
in a error_template method on the Patten class and can be customized by
subclassing and extending the pat-validation pattern or by patching it
via Pattern.prototype.

Maintenance

  • Build: Upgrade dependencies. (fed2716)

  • core dom template: Warn about using dom.template due to a CSR probmel. (989fa9f)Warn about a problem of dom.template with a Content-Security-Policy set.
    If a CSR rule is set then dom.template would break the code unless
    'unsafe-eval' is allowed (which you wouldn't normally allow when using a CSR).
    Therefore it is not recommended to use this template function.

  • pat-clone-code: Better example, correct documentation. (028ba07)

  • Remove IE related code paths. (9de0d95)