1.3.4
Security improvements
- The script matcher now is able to detect malformed closing tags (containing "pseudo-attributes" that shouldn't be there according to the spec). This lets Astro-Shield to be more effective at removing a wider range of malicious injected scripts from dynamically generated content.
- Some regular expressions have been reworked to mitigate the possibility polynomial or exponential execution time. This helps to prevent the possibility of DoS attacks via specially crafted strings intended to blow up the execution time of parsing code.
Autogenerated Changelog
- docs: enable sri in docs site by @castarco in #61
- chore: optimise docs site local build by @castarco in #62
- fix: capture a wider range of malicious input by @castarco in #68
Full Changelog: 1.3.3...1.3.4