Skip to content

Releases: browserify/static-module

v2.1.0

26 Jan 15:06
1f20520
Compare
Choose a tag to compare

Add parserOpts option to configure acorn, eg parserOpts: { sourceType: 'module' }

002a6e5

v2.0.0

19 Nov 19:07
d6660f6
Compare
Choose a tag to compare

dependency updates, most notably static-eval to v2.0.0 which fixes a security vulnerability.

Callbacks from statically evaluated code are now passed as a proxy function that cannot be called, but that can be stringified using .toString(). This way it is not possible to execute untrusted code directly.