swagger-ui

Author SHA1 Message Date

Author	SHA1	Message	Date
Vladimir Gorej	01a3e55960	fix(security): disable reading config params from URL search params (#7697 ) Reading configuration parameters from URL search params is by default no longer enabled. To re-enable it, set queryConfigEnabled configuration parameter to true. Functionally, this is a breaking change, but given we're just providing a security vulnerability patch we're considering this a PATCH version bump only. Refs #4872 Refs https://github.com/swagger-api/swagger-ui/security/advisories/GHSA-qrmm-w75w-3wpx	2021-12-09 17:28:17 +01:00
Irena Shaigorodsky	d7d166d0a4	fix: specify charset utf-8 in html script declaration (#6278 ) ref: #5311	2020-07-31 16:51:17 -07:00
kyle	0047ce96a8	fix: don't trigger `url` remote document load if `urls` is provided (via #5161 ) * fix: don't trigger `url` remote document load if `urls` is provided * better test block title	2019-02-06 19:32:35 -06:00

Vladimir Gorej

01a3e55960

fix(security): disable reading config params from URL search params (#7697 )

Reading configuration parameters from URL search params 
is by default no longer enabled. To re-enable it, set queryConfigEnabled
configuration parameter to true.

Functionally, this is a breaking change, but given we're just providing
a security vulnerability patch we're considering this a PATCH version bump
only.

Refs #4872
Refs https://github.com/swagger-api/swagger-ui/security/advisories/GHSA-qrmm-w75w-3wpx

2021-12-09 17:28:17 +01:00

Irena Shaigorodsky

d7d166d0a4

fix: specify charset utf-8 in html script declaration (#6278 )

ref: #5311

2020-07-31 16:51:17 -07:00

kyle

0047ce96a8

fix: don't trigger url remote document load if urls is provided (via #5161 )

* fix: don't trigger `url` remote document load if `urls` is provided

* better test block title

2019-02-06 19:32:35 -06:00

3 Commits