Security fix
The XSS fix in this release could potentially cause issues if you were using the translateString feature to render HTML. Switching to Markdown will solve your problems.
@rjsf/core
- Fix XSS when rendering schema validation errors #4254
- NOTE: This will have potential consequences if you are using the translateString feature and are trying to render HTML. Switching to Markdown will solve your problems.
@rjsf/utils
- Updated the
ValidatorType
interface to add an optionalreset?: () => void
prop that can be implemented to reset a validator back to initial constructed state- Updated the
ParserValidator
to provide areset()
function that clears the schema map
- Updated the
- Also updated the default translatable string to use
Markdown
rather than HTML tags since we now render them withMarkdown
@rjsf/validator-ajv8
- Updated the
AJV8Validator
to implement thereset()
function to remove cached schemas in theajv
instance
Dev / docs / playground
- Updated the
Validator
dropdown to addAJV8 (discriminator)
which sets the AJV validator discriminator option totrue
to support testing schemas with that option in them