Download Latest Version 3.0.3 source code.tar.gz (436.7 kB)
Email in envelope

Get an email when there's a new version of Neiki's Editor

Home / 2.10.1
Name Modified Size InfoDownloads / Week
Parent folder
2.10.1 source code.tar.gz 2026-05-18 396.6 kB
0
2.10.1 source code.zip 2026-05-18 399.7 kB
0
README.md 2026-05-18 710 Bytes
0
Totals: 3 Items   797.0 kB 0

2.10.1

Fixed

  • HTML Sanitizer XSS Vulnerability — fixed a cross-site scripting (XSS) vulnerability in the sanitizer's entity decoding logic
  • Replaced innerHTML-based entity decoding with a safe regex-based implementation that never parses HTML
  • Added safe support for:
  • named entities such as &, <, >, ", ', and  
  • numeric entities like {
  • hexadecimal entities like 💩

Security

  • Eliminated HTML parsing during entity decoding to reduce XSS attack surface
  • Hardened sanitizer internals against malicious entity-based payloads

Full Changelog: https://github.com/neikiri/neiki-editor/compare/2.10.0...2.10.1

Source: README.md, updated 2026-05-18