From c4e526d7d8ba8352132192d3fbcd69ac2844c441 Mon Sep 17 00:00:00 2001 From: Kevin Moore Date: Mon, 23 Mar 2020 20:21:54 +0000 Subject: [PATCH] Add a changelog entry for the NodeValidator fix Change-Id: Id13be5f6f1adadb2a3cd00f7b5bfb5428b2fd575 Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/140701 Reviewed-by: Alexander Thomas --- CHANGELOG.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index fbf5e770035..e03920b2c1d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -315,9 +315,14 @@ representation soon. [17207]: https://github.com/dart-lang/sdk/issues/17207 -## 2.7.2 - 2020-03-16 +## 2.7.2 - 2020-03-23 -This is a patch release that improves compatibility with ARMv8 processors +This is a patch release that addresses a vulnerability dart:html +[NodeValidator](https://api.dart.dev/stable/dart-html/NodeValidator-class.html) +related to DOM clobbering of `previousSibling`. Thanks to **Vincenzo di Cicco** +for finding and reporting this issue. + +This release also improves compatibility with ARMv8 processors (issue [40001][]) and dart:io stability (issue [40589][]). [40001]: https://github.com/dart-lang/sdk/issues/40001