From fd3cb540d1b46855cb01825e6b17cabbc4f514fb Mon Sep 17 00:00:00 2001 From: Tom Boutell Date: Tue, 26 Jan 2021 16:09:17 -0500 Subject: [PATCH] changelog credit --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index fcb4c8e..b9c9ecf 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,7 @@ ## 2.3.2 (2021-01-26): - Additional fixes for iframe validation exploits. Prevent exploits based on browsers' tolerance of the use of "\" rather than "/" and the presence of whitespace at this point in the URL. Thanks to Ron Masas of [Checkmarx](https://www.checkmarx.com/) for pointing out the issue and writing unit tests. +- Documentation correction for `yarn` users. Thanks to Tagir Khadzhiev. ## 2.3.1 (2021-01-22): - Uses the standard WHATWG URL parser to stop IDNA (Internationalized Domain Name) attacks on the iframe hostname validator. Thanks to Ron Masas of [Checkmarx](https://www.checkmarx.com/) for pointing out the issue and suggesting the use of the WHATWG parser.