Patch Changes
-
🐞🩹 don't throw when a script assigns an invalid value to
a.href, e.g.http://(by @gioboa in #725) -
🐞🩹 allow
resolveUrlto return aReadonly<URL>(by @gioboa in #726) -
🐞🩹 match
<script>tags case-insensitively when rewriting iframe srcdoc HTML, so<SCRIPT>variants can't bypass the rewrite (by @gioboa in #724) -
🐞🩹 wrap the snippet in an IIFE so top-level helpers no longer leak
t,e,ninto the page's global scope and break other classic scripts (by @gioboa in #727)