This is a release which fixes an important security issue without additional features.
All users of 0.10.0 are encouraged to upgrade as soon as possible. If you are using mjml-python 0.9.1 or earlier, you are not affected.
Learn more in our security advisory: Potentially untrusted input is rendered as HTML in final output (GHSA-578p-fxmm-6229) (CVE-2024-26151). Credits go to @sh-at-cs for discovering the issue.
Other than that, only a few internal changes like the replacement of the homegrown AttrDict with DotMap as well as switching the tests to use the well-known pytest.
Contributors
sh-at-cs
Assets 6
0
Join discussion