Skip to content

1.2.0

Latest
Compare
Choose a tag to compare
@dimsemenov dimsemenov released this 08 Jun 08:20

This update fixes jQuery deprecated functions and potential security vulnerabilities if you aren't fully sanitizing user input (for example, if your users can create HTML elements with attributes that contain non-sanitized HTML).

  • Updated functions that are deprecated by jQuery 3.7.1+
  • Added options allowHTMLInStatusIndicator, allowHTMLInTemplate that disable HTML within the loading indicator and fields like image title. Options are disabled by default (by default HTML is not allowed). If you want to make it work as before enable these:
$('.gallery').magnificPopup({
  allowHTMLInStatusIndicator: true,
  allowHTMLInTemplate: true,
  // ...
});

You can grab the latest version from dist/ directory https://github.com/dimsemenov/Magnific-Popup/tree/master/dist