Vladimír Gorej
80d56c9518
feat: apply cumulative update to address various issues ( #10324 )
2025-02-27 11:12:42 +01:00
Oliwia Rogala
0aed3bc831
fix(json-schema-2020-12): expand deeply all Schema Objects and complex keywords ( #9581 )
...
Refs #9508
Supersedes #9510
Co-authored-by: Julien Bourges <julien.bourges@actility.com >
2024-02-14 10:16:34 +01:00
Chad Knight
94c70e21cd
fix(plugin): allow Topbar plugin to read url param on load ( #8168 )
...
* fix(plugin): allow Topbar plugin to read url param on load
* fix(plugin): add cypress tests for topbar w/o query config
2022-09-21 13:24:00 -07:00
Anne Stellingwerf
a89c90ec77
fix(oauth2): generate default oauth2RedirectUrl based on page location and path ( #7476 )
...
Co-authored-by: Tim Lai <timothy.lai@gmail.com >
2022-02-01 16:25:52 -08:00
Vladimir Gorej
01a3e55960
fix(security): disable reading config params from URL search params ( #7697 )
...
Reading configuration parameters from URL search params
is by default no longer enabled. To re-enable it, set queryConfigEnabled
configuration parameter to true.
Functionally, this is a breaking change, but given we're just providing
a security vulnerability patch we're considering this a PATCH version bump
only.
Refs #4872
Refs https://github.com/swagger-api/swagger-ui/security/advisories/GHSA-qrmm-w75w-3wpx
2021-12-09 17:28:17 +01:00
Irena Shaigorodsky
d7d166d0a4
fix: specify charset utf-8 in html script declaration ( #6278 )
...
ref: #5311
2020-07-31 16:51:17 -07:00
kyle
0047ce96a8
fix: don't trigger url remote document load if urls is provided (via #5161 )
...
* fix: don't trigger `url` remote document load if `urls` is provided
* better test block title
2019-02-06 19:32:35 -06:00
