Permalink
Comparing changes
Choose two branches to see what’s changed or to start a new pull request.
If you need to, you can also or
learn more about diff comparisons.
Open a pull request
Create a new pull request by comparing changes across two branches. If you need to, you can also .
Learn more about diff comparisons here.
...
- 7 commits
- 8 files changed
- 5 contributors
Commits on Feb 18, 2026
-
chore: rename escape helper function (#3900)
* chore: update helpers * fix image alt escape * remove unescapeTest regex
Commits on Feb 24, 2026
-
chore(deps-dev): Bump eslint from 10.0.0 to 10.0.1 (#3901)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Feb 28, 2026
Commits on Mar 3, 2026
-
chore(deps-dev): Bump eslint from 10.0.1 to 10.0.2 (#3904)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Mar 4, 2026
-
fix: prevent ReDoS in inline link regex title group (#3902)
The title separator in the link regex used [ \t]* which allowed the title group to be probed at every backtrack position of the greedy href group. On long single-line input containing [text]( patterns without a nearby closing ), this produced O(n²) per regex call and O(n³) in the full inline tokenizer. Change [ \t]* to [ \t]+|\n to require actual whitespace before the title. This matches CommonMark spec requirements and eliminates the backtracking cascade. Before: 18K input takes ~36 seconds (event loop blocked) After: 18K input takes ~45ms
-
chore(release): 17.0.4 [skip ci]
## [17.0.4](v17.0.3...v17.0.4) (2026-03-04) ### Bug Fixes * prevent ReDoS in inline link regex title group ([#3902](#3902)) ([46fb9b8](46fb9b8))
Loading
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v17.0.3...v17.0.4