-
Notifications
You must be signed in to change notification settings - Fork 324
Permalink
Choose a base ref
{{ refName }}
default
Choose a head ref
{{ refName }}
default
Comparing changes
Choose two branches to see what’s changed or to start a new pull request.
If you need to, you can also or
learn more about diff comparisons.
Open a pull request
Create a new pull request by comparing changes across two branches. If you need to, you can also .
Learn more about diff comparisons here.
base repository: clean-css/clean-css
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v4.1.9
Could not load branches
Nothing to show
Loading
Could not load tags
Nothing to show
{{ refName }}
default
Loading
...
head repository: clean-css/clean-css
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v4.1.11
Could not load branches
Nothing to show
Loading
Could not load tags
Nothing to show
{{ refName }}
default
Loading
- 9 commits
- 17 files changed
- 2 contributors
Commits on Mar 5, 2018
-
Fixes #988 - edge case in dropping
animation-duration
.When `animation-duration` is default but `animation-delay` isn't we shouldn't drop the former as both need to be given.
Configuration menu - View commit details
-
Copy full SHA for 21a5df0 - Browse repository at this point
Copy the full SHA 21a5df0View commit details -
Fixes #989 - edge case in removing unused at-rules.
When a value has `!important` in it then it should be stripped bare before matching to the list of at-rules.
Configuration menu - View commit details
-
Copy full SHA for 8be4084 - Browse repository at this point
Copy the full SHA 8be4084View commit details -
[#1001] Fix corrupted state of tokenizer (#1010)
- case of roundBracketLevel inferior to 0.
Configuration menu - View commit details
-
Copy full SHA for e944a2b - Browse repository at this point
Copy the full SHA e944a2bView commit details -
Configuration menu - View commit details
-
Copy full SHA for bedd8a9 - Browse repository at this point
Copy the full SHA bedd8a9View commit details -
Fixes #1008 - edge case in breaking up
font
.`font` shorthand needs `font-size` and `font-family`.
Configuration menu - View commit details
-
Copy full SHA for 913d72c - Browse repository at this point
Copy the full SHA 913d72cView commit details -
Configuration menu - View commit details
-
Copy full SHA for 9e0a38e - Browse repository at this point
Copy the full SHA 9e0a38eView commit details -
Configuration menu - View commit details
-
Copy full SHA for c601ebd - Browse repository at this point
Copy the full SHA c601ebdView commit details
Commits on Mar 6, 2018
-
Jamie Davis (@davisjam) from Virginia Tech reported that clean-css suffers from ReDOS vulnerability [0] when fed with crafted input. Since not so many people use clean-css allowing untrusted input such cases may be rare, but this commit reworks vulnerable code to prevent such attacks. It also limits certain whitespace blocks to sane length of 31 characters in validation regexes to prevent similar issues. [0] https://snyk.io/blog/redos-and-catastrophic-backtracking
Configuration menu - View commit details
-
Copy full SHA for 0440b4a - Browse repository at this point
Copy the full SHA 0440b4aView commit details -
Configuration menu - View commit details
-
Copy full SHA for 7812d59 - Browse repository at this point
Copy the full SHA 7812d59View commit details
Loading
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v4.1.9...v4.1.11