Skip to content

fix(deps): update dependency xss to v1.0.17 - #4229

Merged
KATO-Hiro merged 1 commit into
stagingfrom
renovate/xss-1.x
Oct 25, 2026
Merged

KATO-Hiro merged 1 commit into
stagingfrom
renovate/xss-1.x

Conversation

@renovate

@renovate renovate Bot commented Oct 25, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
xss 1.0.16 → 1.0.17 age confidence

Release Notes

leizongmin/js-xss (xss)

v1.0.17

Compare Source

  • fix: use the default callback when escapeHtml, onTag, onTagAttr, onIgnoreTag, onIgnoreTagAttr or safeAttrValue is null, undefined, or not a function. An own function still overrides the default, and inherited properties are still ignored (#​304).
  • fix: filterXSSWithResult() copies only own option properties, so a polluted prototype can no longer supply callbacks.
  • fix: treat null and undefined whiteList / allowList as unset. An explicit object, including {}, is still used. When whiteList is unset, allowList is used; otherwise the default whitelist is used.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coderabbitai

coderabbitai Bot commented Oct 25, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@KATO-Hiro
KATO-Hiro merged commit fc5ca3a into staging Oct 25, 2026
7 checks passed
@KATO-Hiro
KATO-Hiro deleted the renovate/xss-1.x branch October 25, 2026 21:52

This branch was previously deployed

1 inactive deployment
preview — edfe0f0a Deployed Oct 25, 2026 by renovate[bot] via preview #9102
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant