Installing an EPUB viewer and getting a known-vulnerable XML parser in your app is awful. v2.2.2 removes that path.
This release packages the EPUB engine locally, lazy-loads it only when needed, and uses @xmldom/xmldom 0.9.10. A clean registry install and audit now pass without the legacy parser.
What changed:
- Fixed PDF upload → render → download returning a zero-byte file (#139).
- Updated
@file-viewer/docxto 0.3.21, fixing anchored drawings and missing header/footer roots (#133, #130). - Kept PPT and PPTX ready out of the box with packaged local workers and assets.
- Hardened Docker security headers and offline asset delivery.
- Refined the desktop/mobile viewer shell, dark mode, file icons, sample picker, scrollbars, and immersive URL mode.
- Re-recorded the Chinese and English README GIFs and refreshed the documentation/site screenshots.
- Aligned the published matrix at 208 extensions across 25 preview pipelines and 54 npm targets.
The release includes 53 npm tarballs, five static/offline archives, and five machine-readable manifests. The unchanged compatibility package remains at its existing version.
Full IIFE users should load the large bundle from unpkg; jsDelivr rejects this package because it exceeds its size limit.