Changelog

v4.7.1 Release

Maintenance and security release: hardens the md helper against XSS, clears a markdown-it DoS advisory, and refreshes runtime and tooling dependencies.

  • The md/markdown helper no longer HTML-entity-decodes its rendered output — markdown-it's escaping is now preserved (8c3c0f3, #230). The previous decodeHTML(md.render(...)) step enabled attribute-breakout XSS (e.g. an alt-text payload injecting a live onerror handler) and corrupted URLs whose query params began with a legacy entity...
Read more →
v4.7.0 Release
Read more →
v4.6.1 Release
Read more →
v4.6.0 Release

Full Changelog: https://github.com/jaredwray/fumanchu/compare/v4.5.1...v4.6.0

Read more →
v4.5.1 Release
Read more →
v4.5.0 Release
Read more →
v4.4.0 Release
Read more →
v4.3.0 Release

Full Changelog: https://github.com/jaredwray/fumanchu/compare/v4.2.0...v4.3.0

Read more →
v4.2.0 Release

Full Changelog: https://github.com/jaredwray/fumanchu/compare/v4.1.0...v4.2.0

Read more →
v4.1.0 Release

Full Changelog: https://github.com/jaredwray/fumanchu/compare/v4.0.3...v4.1.0

Read more →
v4.0.3 Release

Full Changelog:...

Read more →
v4.0.2 Release
Read more →
v4.0.1 Release

Full Changelog: https://github.com/jaredwray/fumanchu/compare/v4.0.0...v4.0.1

Read more →
v4.0.0 Release
Read more →
v3.1.3 Release
Read more →
v3.1.2 Release
Read more →
v3.1.1 Release

Full Changelog: https://github.com/jaredwray/fumanchu/compare/v3.1.0...v3.1.1

Read more →
v3.1.0 Release
Read more →
v3.0.4 Release
Read more →
v3.0.3 Release
Read more →