covid-19-monitor
covid-19-monitor copied to clipboard
Bump react-native-webview from 7.4.3 to 11.0.0
Bumps react-native-webview from 7.4.3 to 11.0.0.
Release notes
Sourced from react-native-webview's releases.
v11.0.0
11.0.0 (2020-11-24)
Features
- android: Introduce setSupportMultipleWindows to mitigate CVE-2020-6506 (#1747 by
@mrcoinbase
and@kelset
-- THANK YOU!) (194c6a2)BREAKING CHANGES
- android: This release introduces the
setSupportMultipleWindows
prop for Android. This sets the underlying Android WebView settingsetSupportMultipleWindows
. This prop defaults totrue
(previouslyfalse
), and serves to mitigate the security advisory CVE-2020-6506.The primary way this new behavior changes existing React Native WebView implementations on Android is that links that open in new tabs/windows (such as
<a target="_blank">
) will now prompt to open in the system browser, rather than re-using the current WebView.If this behavior is not desirable, you can set this new prop to
false
, but be aware that this exposes your app to the security vulnerability listed above. Make sure you have read and understand the whole advisory and relevant links.iOS & Windows are unaffected.
<WebView // ... setSupportMultipleWindows={true} // default: true />
Thanks to
@mrcoinbase
,@kelset
, and@Titozzz
for their work on this.v10.10.2
10.10.2 (2020-11-06)
Bug Fixes
v10.10.1
10.10.1 (2020-11-06)
Bug Fixes
- windows: Resolve Missing Deploy Target (#1716 by
@chiaramooney
) (8bd0b41)v10.10.0
10.10.0 (2020-10-26)
Features
... (truncated)
Commits
aaf7881
chore(release): 11.0.0 [skip ci]194c6a2
feat(android): Introduce setSupportMultipleWindows to mitigate CVE-2020-6506 ...1b009dd
chore(release): 10.10.2 [skip ci]c95c0ea
fix(android): Unset mWebChromeClient on WebViewManager rather than WebView (#...4ec290d
chore(release): 10.10.1 [skip ci]8bd0b41
fix(windows): Resolve Missing Deploy Target (#1716 by@chiaramooney
)74872a1
chore(release): 10.10.0 [skip ci]b930e25
feat(windows): JS-WebView messaging bridge & multiple WebViews fixes (#1617)6398415
chore(release): 10.9.3 [skip ci]ef48d35
fix(android): Update SSL error handling (#1466)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -
@dependabot use these labels
will set the current labels as the default for future PRs for this repo and language -
@dependabot use these reviewers
will set the current reviewers as the default for future PRs for this repo and language -
@dependabot use these assignees
will set the current assignees as the default for future PRs for this repo and language -
@dependabot use this milestone
will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.