bpampuch/pdfmake 0.3.6

on GitHub

Added setUrlAccessPolicy() for defining a custom access policy for external URLs before download
(addresses a potential server vulnerability CVE-2026-26801)

Example:

 pdfmake.setUrlAccessPolicy((url) => {
 	// check allowed domain
 	return url.startsWith("https://example.com/");
 });

For details see documentation

Added validation for image height and width values