From aaf788169b53e5d5a0a892dbef8f4e23fbcb98a9 Mon Sep 17 00:00:00 2001 From: semantic-release-bot Date: Tue, 24 Nov 2020 17:20:20 +0000 Subject: [PATCH] chore(release): 11.0.0 [skip ci] # [11.0.0](https://github.com/react-native-community/react-native-webview/compare/v10.10.2...v11.0.0) (2020-11-24) ### Features * **android:** Introduce setSupportMultipleWindows to mitigate CVE-2020-6506 ([#1747](https://github.com/react-native-community/react-native-webview/issues/1747) by [@mrcoinbase](https://github.com/mrcoinbase) and [@kelset](https://github.com/kelset) -- THANK YOU!) ([194c6a2](https://github.com/react-native-community/react-native-webview/commit/194c6a2335b12cc05283413c44d0948eb5156e02)) ### BREAKING CHANGES * **android:** This release introduces the `setSupportMultipleWindows` prop for Android. This sets the underlying Android WebView setting `setSupportMultipleWindows`. This prop defaults to `true` (previously `false`), and serves to mitigate the security advisory [CVE-2020-6506](https://github.com/react-native-webview/react-native-webview/security/advisories/GHSA-36j3-xxf7-4pqg). The primary way this new behavior changes existing React Native WebView implementations on Android is that links that open in new tabs/windows (such as ``) will now prompt to open in the system browser, rather than re-using the current WebView. If this behavior is not desirable, you can set this new prop to `false`, but be aware that this exposes your app to the security vulnerability listed above. Make sure you have read and understand the whole advisory and relevant links. iOS & Windows are unaffected. ```jsx ``` Thanks to @mrcoinbase, @kelset, and @Titozzz for their work on this. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 5b31247..8937c9c 100644 --- a/package.json +++ b/package.json @@ -8,7 +8,7 @@ "Thibault Malbranche " ], "license": "MIT", - "version": "10.10.2", + "version": "11.0.0", "homepage": "https://github.com/react-native-community/react-native-webview#readme", "scripts": { "start": "node node_modules/react-native/local-cli/cli.js start",