release v3.15.2

team-leevio · Dec 24, 2024 · 90f4e1d · 90f4e1d
1 parent e17ed73
commit 90f4e1d
Show file tree

Hide file tree

Showing 6 changed files with 87 additions and 79 deletions.
diff --git a/assets/js/custom-mouse-cursor.js b/assets/js/custom-mouse-cursor.js
@@ -110,7 +110,7 @@ function initiateHaCursorObject() {
             }
             if ('text' == settings.type) {
               if (settings.text && settings.text != undefined) {
-                this.$element.attr('data-cursor-text', settings.text);
+                this.$element.attr('data-cursor-text', DOMPurify.sanitize(settings.text));
               } else {
                 this.$element.attr('data-cursor-text', ' ');
               }

diff --git a/assets/js/custom-mouse-cursor.min.js b/assets/js/custom-mouse-cursor.min.js
diff --git a/changelog.txt b/changelog.txt
@@ -1,3 +1,7 @@
+= 3.15.2 - 24 December 2024 =
+
+- Fix: XSS security on Happy Mouse Cursor feature.
+
 = 3.15.1 - 15 December 2024 =
 
 - Fix: Some edge cases with Happy Mouse Cursor feature.