Skip to content

2.5.6

Compare
Choose a tag to compare
@evgenykuzyakov evgenykuzyakov released this 31 Jan 17:21
· 28 commits to master since this release
fe647fe

2.5.6

  • FIX: Restrict native object prototypes from being accessed. To address BN issue, reported by BrunoModificato from OtterSec.
  • FIX: Filter out some ethers.js utils. Reported by BrunoModificato from OtterSec.
  • FIX: Remove potential XSS vulnerability for some SVG tags. Reported by BrunoModificato from OtterSec.
  • Minor: report widget src when VM throws an exception during rendering.