عنوان:

‫jQuery 3.5.0 منتشر شد


نویسنده: وحید نصیری
تاریخ: ۱۳۹۹/۰۱/۲۳ ۱۰:۴۵
آدرس: www.dntips.ir

The main change in this release is a security fix, and it’s possible you will need to change your own code to adapt. Here’s why: jQuery used a regex in its jQuery.htmlPrefilter method to ensure that all closing tags were XHTML-compliant when passed to methods. For example, this prefilter ensured that a call like jQuery("<div class='hot' />") is actually converted to jQuery("<div class='hot'></div>"). Recently, an issue was reported that demonstrated the regex could introduce a cross-site scripting (XSS) vulnerability. 



مشاهده مطلب اصلی