Update changelog

braintree · Mar 18, 2024 · d75a919 · d75a919
1 parent fad9780
commit d75a919
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,8 @@
 # CHANGELOG
 
+## 7.0.1
+- Improve sanitation of HTML Entities
+
 ## 7.0.0
 
 - Move constant declarations from index file to `constants.ts` file

diff --git a/src/__tests__/index.test.ts b/src/__tests__/index.test.ts
@@ -111,6 +111,11 @@ describe("sanitizeUrl", () => {
       "javasc&#\u0000x09;ript:alert(1)",
       "java&#38;&#38;&#35;78&#59;ewLine&#38;newline&#59;&#59;script&#58;alert&#40;&#39;XSS&#39;&#41;",
       "java&&#78;ewLine&newline;;script:alert('XSS')",
+      // "javascrip\164t:alert()",
+      // "javascrip\nt:alert()",
+      // "javascrip\rt:alert()",
+      "%6Aavascript:alert()"
+      // "javascrip0x2f0x6et:alert()"
     ];
 
     attackVectors.forEach((vector) => {