Skip to content

1.3.4

Compare
Choose a tag to compare
@castarco castarco released this 02 Apr 09:29
· 64 commits to main since this release
b0ded0b

Security improvements

  • The script matcher now is able to detect malformed closing tags (containing "pseudo-attributes" that shouldn't be there according to the spec). This lets Astro-Shield to be more effective at removing a wider range of malicious injected scripts from dynamically generated content.
  • Some regular expressions have been reworked to mitigate the possibility polynomial or exponential execution time. This helps to prevent the possibility of DoS attacks via specially crafted strings intended to blow up the execution time of parsing code.

Autogenerated Changelog

Full Changelog: 1.3.3...1.3.4