vaadin/flow 23.7.0-beta4

Vaadin Flow 23.7.0-beta4

on GitHub

Changes since 23.7.0-beta3

All changes

New features

• Validate URL schemes in Anchor, IFrame and Page#open (CP: 23.7)
  Commit · Pull request

  branch 25.1, and also disables the validation by default. The defaults when "safeUrlSchemes" configuration is missing is adjusted, so that URL validation is disabled by default, and all URLs are considered safe. This avoids unexpected behavior changes for existing users of Flow 25.1 and below. The URL scheme validation feature could be enabled with configuration when necessary.

• Add configurable max request body size (#24866) (CP: 23.7)
  Commit · Pull request

  Add maxRequestBodySize property to limit UIDL/RPC and push request body size (-1 disables); the default is 10 MB; does not affect uploads.

Fixes

• Pin types/node to a functional version
  Commit · Pull request

  Pin the @types/node version so we have a typescript vesion match.

• Install pnpm deps in hoisted mode + declare @babel/types (#24288) (CP:23.7)
  Commit · Pull request

  The Vite dev server intermittently fails (or hangs) on vite-basics and other Vite-using IT modules because transitive npm dependencies are not consistently reachable from the project's root node_modules.
  Selenium tests then wait for pages that never render, and the matrix shard times out at the 30-minute job cap.