Skip to content

Latest commit

 

History

History
26 lines (17 loc) · 947 Bytes

NEWS.md

File metadata and controls

26 lines (17 loc) · 947 Bytes
Raw

User-visible changes in realms-shim:

Release 1.1.2 (25-Sep-2019)

No user-visible changes. Minor dependency updates, including "handlebars" which npm-audit flagged as a security problem (but which is only used during tests).

Release 1.1.1 (24-Sep-2019)

  • Fix published packages: the previous release could not be imported successfully becase 'rollup' rewrote eval statements in a way that conflicted with the shim's use of evaluation. (#40, #54)

Release 1.1.0 (18-Sep-2019)

First release to NPM. Previously, code that used realms-shim had to get it as a git-submodule, or by wholesale cut-and-paste of the code.

  • SECURITY UPDATE: This release fixes a sandbox escape discovered in the realms-shim by GitHub user "XmiliaH", which works by causing an infinite loop and extracting the real function constructor from the RangeError exception object. See Agoric#48 for more details.