Releases: ncase/nutshell
Recursive Wikipedia Rabbithole
Ay, it's been a while. How's it goin', y'all?
What's new in this release:
- You can now embed specific sections from Wikipedia -- with recursive expandable links! -- thanks to @Dev-Mehta's PR: #34
- Nutshell is also now available in Vietnamese, thanks to @khang200923 : #33
Happy spooky month 🎃,
~ Nicky Case
Contributors
Assets 2
Baby's First XSS Vulnerability
HA HA WELP it finally happened, y'all found an XSS vulnerability in Nutshell. But y'all caught it! It is now fixed.
Special thanks to @arxenix ( Issue #32 ) for posting the exact details of the problem. Also special thanks to @alueft who contacted me by email, pointing out the exact line that was causing the problem. (The problem: I was using "innerHTML" when I should have used "innerText", on line 615 in nutshell.js)
Also, hat tip to the suggestion by @psmoros ( Issue #31 ) to create a SECURITY.md file for future security disclosures. (That issue cc'd @xanhacks & @huntr-helper, thank you to y'all too!)
This release also fixes a bug where, if you embedded a whole page, "hidden" headers would no longer be hidden. Thank you to @toombs-caeman for pointing this out and doing a Pull Request with the exact fix for this.
Thank you to everyone above for contributing, and being patient while I was scatterbrained for 2-3 weeks before finally fixing these.
🐞 Bugs for Days,
~ Nicky Case
Contributors
Assets 2
More Translations
- Hindi translation by @i-shivamsoni
- Russian translation by @vintagentleman
Thank you! 🎉
Contributors
Assets 2
Annyeong!
Version 1.0.4 - On the 23rd Day of Christmas
Very very very belatedly accepting two Pull Requests:
- Thank you @chriscoyier for giving Nutshell better accessibility, and making the close button an actual
<button>! (and thanks to everyone else who brought up accessibility issues in #19 ) - Thank you @asandikci for the Turkish translation!
Sorry I'm very slow with accepting PRs, and thank you two again!
Contributors
Assets 2
Version 1.0.3 – Remember Remember The Fifth of November
- Added Hebrew translation (thanks @Adiveler!).
- Fixed bug where the embed-this-nutshell modal didn't have a <script> tag to copypaste, whoops.
Contributors
Assets 2
Version 1.0.2 – More Translations & Bug Fixes
Translations added: French, Spanish, Chinese
Fixed bugs:
- Nutshell expandables now copy the background & font color of whatever container it's in
- Wikipedia links work even if they have weird characters in them
- Youtube links with timestamps actually work now, whoops
Added:
- A "learn more" button to the "embed this Nutshell" modal
Also, changed the front page of Nutshell to highlight the embedding/transcluding part of Nutshell more, since that's its main value-add above previous similar implementations.
Version 1.0.1 – "There Were Immediate Problems Upon Shipping"
Four new translations! Also hopefully pushing a new version will get JSDeliver to re-build the minified version, coz right now it returns a 404 (Issue 9: #9 )