Changes since 23.6.12
New features
-
Validate URL schemes in Anchor, IFrame and Page#open (CP: 23.6)
Commit · Pull requestbranch 25.1, and also disables the validation by default. The defaults when "safeUrlSchemes" configuration is missing is adjusted, so that URL validation is disabled by default, and all URLs are considered safe. This avoids unexpected behavior changes for existing users of Flow 25.1 and below. The URL scheme validation feature could be enabled with configuration when necessary.
-
Add configurable max request body size (#24866) (CP: 23.6)
Commit · Pull requestAdd maxRequestBodySize property to limit UIDL/RPC and push request body size (-1 disables); the default is 10 MB; does not affect uploads.
Fixes
-
Pin types/node to a functional version (#24896) (CP: 23.6)
Commit · Pull requestPin the
@types/nodeversion so we have a typescript vesion match.