vue-i18n 11.4.18

v11.4.18

on Node.js NPM

escapeParameter: The sanitizer now also turns <script> in translations into text. A <script> does not run with v-html in the browser, but it runs when the translation is rendered on the server (SSR). (#2757) See GHSA-jrxq-gc2q-9357.

What's Changed

🔒 Security Fixes

• fix(shared): neutralize script elements in sanitizeTranslatedHtml by @kazupon in #2757

Full Changelog: v11.4.17...v11.4.18