Update dependency reveal.js to v4.3.0 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
reveal.js (source)	4.2.0 -> 4.3.0

GitHub Vulnerability Alerts

CVE-2022-0776

The onmessage event listener in /plugin/notes/speaker-view.html does not check the origin of postMessage before adding the content to the webpage. The vulnerable code allows any origin to postMessage on the browser window and feeds attacker's input to parts using which attacker can execute arbitrary javascript code on victim's browser window hosting reveal.js

---

Release Notes

hakimel/reveal.js

v4.3.0

Compare Source

tldr — self-destruction and bug fixes 💣

Changes

• It's now possible to destroy/uninitialize a reveal.js presentation. This will remove all event listeners and roll back all changes made to the DOM. It will also unregister all plugins and destroy them if they expose a destroy method. (#​1145 / @​hakimel)

  Reveal.destroy();

• You can now provide an absolute URL to the presentation that should be loaded in the speaker view. This is useful if you have a presentation integrated as part of a web page but still want the speaker view to work.

  Reveal.initialize({ url: 'https://example.com/my-reveal-presentation' })

• Source maps are now included in dist (#​3082 / @​dabrahams)

Fixes

• Fix the speaker view no longer goes out of sync with your presentation after live-reloading (#​2822 / @​hakimel).
• Fix XSS vulnerability in speaker view (#​3137 / @​r0hanSH)
• Fix issues with scaling embedded presentations when entering fullscreen mode in Safari (#​3080 / @​Martinomagnifico)

v4.2.1

Compare Source

Bug fix release 🐛

Fixes

• Fix an issue where some slides disappeared (fully or partially) after slide transitions in Chrome (9e583b8 @​hakimel)
• Fix an issue that caused double-navigations and impacted presentation performance (@​hakimel #​3079)
• Fix --host not working in npm start -- --host=0.0.0.0 (@​cashcat #​3075)
• Fix incorrect sizing of auto-sized text in PDF exports (Printing With r-fit-text Too Big hakimel/reveal.js#2865 (comment) @​hakimel)
• Fix background video playback issue in some browsers by inferring MIME type from file extension (#​3078 @​vanch3d)

---

Configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.