github chakra-ui/zag @zag-js/auto-resize@1.43.1

latest releases: @zag-js/stringify-state@1.43.1, @zag-js/scroll-snap@1.43.1, @zag-js/remove-scroll@1.43.1...
3 hours ago

Patch Changes

  • #3271
    cc6cc84 Thanks
    @bunlongheng! - Fix an XSS vector in autoResizeInput(). The hidden ghost element
    used to measure width assigned the input's value with innerHTML, so a value containing markup was parsed and could
    execute. It now uses textContent.
  • Updated dependencies [9a9381d]:
    • @zag-js/dom-query@1.43.1

Don't miss a new zag release

NewReleases is sending notifications on new releases.