Commit Graph
741 Commits
Author SHA1 Message Date
dependabot[bot] 765ed2f012 Bump tailwindcss from 2.1.4 to 2.2.0
Bumps [tailwindcss](https://github.com/tailwindlabs/tailwindcss) from 2.1.4 to 2.2.0.
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/compare/v2.1.4...v2.2.0)

---
updated-dependencies:
- dependency-name: tailwindcss
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-18 13:03:09 +00:00
Sidharth Vinod af64307067 fix: SecurityLevel 2021-06-15 20:54:09 +05:30
Sidharth Vinod be6931d0ca Merge pull request #209 from Morreski/develop
Mitigate XSS vulnerability and allow img tags to be correctly handled in output SVG.
2021-06-15 13:02:33 +05:30
Enguerrand PelletierandSidharth Vinod a907674539 Trigger an alert when securityLevel is stripped
Co-authored-by: Sidharth Vinod <sidharthv96@gmail.com>
2021-06-15 09:15:47 +02:00
Morreski fbe2f127b8 Only strip securityLevel option when state is loaded from URL 2021-06-14 22:38:44 +02:00
Sidharth Vinod 3848f9d618 Fix lint issues 2021-06-12 11:13:44 +05:30
Sidharth Vinod 4f52a37e1d Merge branch 'master' of https://github.com/mermaid-js/mermaid-live-editor into develop
* 'master' of https://github.com/mermaid-js/mermaid-live-editor:
  Bump normalize-url from 4.5.0 to 4.5.1
  Fix typo in grammer
  Fix CVE
2021-06-12 11:00:48 +05:30
Sidharth Vinod 6c8c0f20c8 Update monaco 2021-06-12 10:59:44 +05:30
Sidharth Vinod 570d5c79a8 Merge pull request #213 from mermaid-js/dependabot/npm_and_yarn/develop/monaco-editor-0.25.0
Bump monaco-editor from 0.24.0 to 0.25.0
2021-06-12 10:55:06 +05:30
Sidharth Vinod 5548625536 Merge pull request #214 from mermaid-js/dependabot/npm_and_yarn/develop/tslib-2.3.0
Bump tslib from 2.2.0 to 2.3.0
2021-06-12 10:54:49 +05:30
Sidharth Vinod bb2f5b46a8 Merge pull request #212 from mermaid-js/dependabot/npm_and_yarn/develop/eslint-7.28.0
Bump eslint from 7.27.0 to 7.28.0
2021-06-12 10:54:36 +05:30
dependabot[bot] 559feacae0 Bump tslib from 2.2.0 to 2.3.0
Bumps [tslib](https://github.com/Microsoft/tslib) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/Microsoft/tslib/releases)
- [Commits](https://github.com/Microsoft/tslib/compare/2.2.0...2.3.0)

---
updated-dependencies:
- dependency-name: tslib
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-12 05:14:48 +00:00
dependabot[bot] ecc514816c Bump monaco-editor from 0.24.0 to 0.25.0
Bumps [monaco-editor](https://github.com/Microsoft/monaco-editor) from 0.24.0 to 0.25.0.
- [Release notes](https://github.com/Microsoft/monaco-editor/releases)
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Microsoft/monaco-editor/compare/v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: monaco-editor
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-12 05:14:43 +00:00
dependabot[bot] 8d2d6a83ae Bump eslint from 7.27.0 to 7.28.0
Bumps [eslint](https://github.com/eslint/eslint) from 7.27.0 to 7.28.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v7.27.0...v7.28.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-12 05:14:31 +00:00
Sidharth Vinod 9ca183e654 Merge pull request #210 from mermaid-js/dependabot/npm_and_yarn/develop/cssnano-5.0.6
Bump cssnano from 5.0.5 to 5.0.6
2021-06-12 10:42:35 +05:30
Sidharth Vinod f65dba35c4 Merge pull request #207 from mermaid-js/dependabot/npm_and_yarn/develop/postcss-8.3.2
Bump postcss from 8.3.0 to 8.3.2
2021-06-12 10:42:26 +05:30
dependabot[bot] 65a1e067ab Bump cssnano from 5.0.5 to 5.0.6
Bumps [cssnano](https://github.com/cssnano/cssnano) from 5.0.5 to 5.0.6.
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@5.0.5...cssnano@5.0.6)

---
updated-dependencies:
- dependency-name: cssnano
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-12 05:01:04 +00:00
dependabot[bot] 14bfbb1607 Bump postcss from 8.3.0 to 8.3.2
Bumps [postcss](https://github.com/postcss/postcss) from 8.3.0 to 8.3.2.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.3.0...8.3.2)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-12 05:00:57 +00:00
Sidharth Vinod 49a812c43f Merge pull request #211 from mermaid-js/dependabot/npm_and_yarn/develop/eslint-plugin-tailwindcss-1.13.2
Bump eslint-plugin-tailwindcss from 1.9.1 to 1.13.2
2021-06-12 10:29:36 +05:30
Sidharth Vinod 45010e17d2 Merge pull request #203 from mermaid-js/dependabot/npm_and_yarn/develop/typescript-eslint/eslint-plugin-4.26.1
Bump @typescript-eslint/eslint-plugin from 4.26.0 to 4.26.1
2021-06-12 10:29:17 +05:30
Sidharth Vinod 60f553f9eb Merge pull request #202 from mermaid-js/dependabot/npm_and_yarn/develop/cypress-7.5.0
Bump cypress from 7.4.0 to 7.5.0
2021-06-12 10:29:04 +05:30
dependabot[bot] cdf9ccd3c9 Bump eslint-plugin-tailwindcss from 1.9.1 to 1.13.2
Bumps [eslint-plugin-tailwindcss](https://github.com/francoismassart/eslint-plugin-tailwindcss) from 1.9.1 to 1.13.2.
- [Release notes](https://github.com/francoismassart/eslint-plugin-tailwindcss/releases)
- [Commits](https://github.com/francoismassart/eslint-plugin-tailwindcss/compare/v1.9.1...v1.13.2)

---
updated-dependencies:
- dependency-name: eslint-plugin-tailwindcss
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 09:17:02 +00:00
dependabot[bot] 566c696be8 Bump cypress from 7.4.0 to 7.5.0
Bumps [cypress](https://github.com/cypress-io/cypress) from 7.4.0 to 7.5.0.
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/.releaserc.base.js)
- [Commits](https://github.com/cypress-io/cypress/compare/v7.4.0...v7.5.0)

---
updated-dependencies:
- dependency-name: cypress
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 09:16:50 +00:00
Sidharth Vinod abde98bd5f Merge pull request #200 from mermaid-js/dependabot/npm_and_yarn/normalize-url-4.5.1
Bump normalize-url from 4.5.0 to 4.5.1
2021-06-11 14:46:12 +05:30
Sidharth Vinod 5c9afbc1ed Merge pull request #205 from mermaid-js/dependabot/npm_and_yarn/develop/mocha-9.0.0
Bump mocha from 8.4.0 to 9.0.0
2021-06-11 14:45:06 +05:30
Morreski cec1dc4df9 Handle <img> tag support in graphs 2021-06-11 11:13:13 +02:00
Morreski 1096d10cb4 Force securityLevel option to 'strict' by default to mitigate XSS attacks 2021-06-11 11:13:03 +02:00
dependabot[bot] d5ecf60c84 Bump mocha from 8.4.0 to 9.0.0
Bumps [mocha](https://github.com/mochajs/mocha) from 8.4.0 to 9.0.0.
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mochajs/mocha/compare/v8.4.0...v9.0.0)

---
updated-dependencies:
- dependency-name: mocha
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 08:05:16 +00:00
dependabot[bot] 4d48a14100 Bump @typescript-eslint/eslint-plugin from 4.26.0 to 4.26.1
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 4.26.0 to 4.26.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.26.1/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 08:03:53 +00:00
Sidharth Vinod d751945e94 Merge pull request #204 from mermaid-js/dependabot/npm_and_yarn/develop/typescript-eslint/parser-4.26.1
Bump @typescript-eslint/parser from 4.26.0 to 4.26.1
2021-06-11 13:31:26 +05:30
Sidharth Vinod aa74eaff95 Merge pull request #206 from mermaid-js/dependabot/npm_and_yarn/develop/prettier-2.3.1
Bump prettier from 2.3.0 to 2.3.1
2021-06-11 13:31:13 +05:30
dependabot[bot] 35bf065120 Bump prettier from 2.3.0 to 2.3.1
Bumps [prettier](https://github.com/prettier/prettier) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/2.3.0...2.3.1)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 05:05:32 +00:00
dependabot[bot] 0604c27b56 Bump @typescript-eslint/parser from 4.26.0 to 4.26.1
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 4.26.0 to 4.26.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.26.1/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 05:04:56 +00:00
dependabot[bot] 956d5d0684 Bump normalize-url from 4.5.0 to 4.5.1
Bumps [normalize-url](https://github.com/sindresorhus/normalize-url) from 4.5.0 to 4.5.1.
- [Release notes](https://github.com/sindresorhus/normalize-url/releases)
- [Commits](https://github.com/sindresorhus/normalize-url/commits)

---
updated-dependencies:
- dependency-name: normalize-url
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-10 16:35:13 +00:00
Sidharth Vinod 4cba8bdb72 Merge pull request #199 from Yukaii/bugfix/fix-grammer-typo
Fix grammer typo
2021-06-09 11:51:38 +05:30
Yukai Huang 09f4b4f35e Fix typo in grammer 2021-06-08 21:06:31 +08:00
Sidharth Vinod c751fc3c01 Merge branch 'master' of https://github.com/mermaid-js/mermaid-live-editor
* 'master' of https://github.com/mermaid-js/mermaid-live-editor:
  Update SRI
  Release 8.10.2
  Release 8.10.2
  Update README.md
  Migrate to GHCR
  Create docker-publish.yml
2021-06-08 11:40:46 +05:30
Sidharth Vinod 65ab28d03b Fix CVE 2021-06-08 11:40:36 +05:30
Sidharth Vinod f4d6ca8c92 Cypress regex fix 2021-06-06 12:27:10 +05:30
Sidharth Vinod 86953aadc7 Merge pull request #198 from mermaid-js/develop
Release 8.10.2
2021-06-06 12:09:57 +05:30
Sidharth Vinod 876b419c04 Update SRI 2021-06-06 12:02:49 +05:30
Sidharth Vinod 8bb611c50c Release 8.10.2 2021-06-06 11:59:16 +05:30
Sidharth Vinod 13286ff4d1 Release 8.10.2 2021-06-06 11:58:07 +05:30
Sidharth Vinod a6db07a4c1 Merge pull request #197 from mermaid-js/develop
Develop
2021-06-05 16:14:54 +05:30
Sidharth Vinod 8d8ae6a366 Merge pull request #105 from Thiht/master
Create docker-publish.yml
2021-06-05 16:09:34 +05:30
Sidharth Vinod e81e09ab23 Merge branch 'develop' into master 2021-06-05 16:09:21 +05:30
Sidharth Vinod e286fb2fb7 Update README.md 2021-06-05 00:41:44 +05:30
Sidharth Vinod 3097161aa8 Migrate to GHCR 2021-06-05 00:27:41 +05:30
Sidharth Vinod b222e37457 Merge branch 'master' of https://github.com/mermaid-js/mermaid-live-editor
* 'master' of https://github.com/mermaid-js/mermaid-live-editor:
  Update dependencies
  Remove test run on push
  Update dependencies
  Fix docker build issue
  Bump typescript from 4.2.4 to 4.3.2
  Bump autoprefixer from 10.2.5 to 10.2.6
  Enable recording
  Bump tailwindcss from 2.1.2 to 2.1.4
  Bump @macfja/svelte-persistent-store from 1.1.0 to 1.1.1
  Bump @typescript-eslint/eslint-plugin from 4.22.1 to 4.26.0
  Bump eslint-plugin-tailwindcss from 1.8.0 to 1.9.1
  Disable lint
  Fix snapshot
  Fix editor
  Touchup
  Bump prettier from 2.2.1 to 2.3.0
  Bump prettier-plugin-svelte from 2.2.0 to 2.3.0
2021-06-04 23:57:55 +05:30
Sidharth Vinod 0d5240dfef Update build image version 2021-06-04 23:54:14 +05:30