This update fixes jQuery deprecated functions and potential security vulnerabilities if you aren't fully sanitizing user input (for example, if your users can create HTML elements with attributes that contain non-sanitized HTML).
- Updated functions that are deprecated by jQuery 3.7.1+
- Added options
allowHTMLInStatusIndicator
,allowHTMLInTemplate
that disable HTML within the loading indicator and fields like image title. Options are disabled by default (by default HTML is not allowed). If you want to make it work as before enable these:
$('.gallery').magnificPopup({
allowHTMLInStatusIndicator: true,
allowHTMLInTemplate: true,
// ...
});
You can grab the latest version from dist/
directory https://github.com/dimsemenov/Magnific-Popup/tree/master/dist