[dart:html] Add security advisory to CHANGELOG

Change-Id: I3f5b58533e8dc51a16f2ae7701c7902fbecc084c
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/197445
Auto-Submit: Srujan Gaddam <srujzs@google.com>
Commit-Queue: Sigmund Cherem <sigmund@google.com>
Reviewed-by: Sigmund Cherem <sigmund@google.com>
This commit is contained in:
Srujan Gaddam 2021-04-30 20:52:16 +00:00 committed by commit-bot@chromium.org
parent 0d64a90d2b
commit c75ca5a613

View file

@ -223,8 +223,11 @@ initializers containing async closures (issue [#45306][]).
## 2.12.3 - 2021-04-14
This is a patch release that fixes a vulnerability in `dart:html` related to
DOM clobbering. Thanks again to **Vincenzo di Cicco** for finding and reporting
this vulnerability.
DOM clobbering. See the [vulnerability advisory][CVE-2021-22540] for more
details. Thanks again to **Vincenzo di Cicco** for finding and reporting this
vulnerability.
[CVE-2021-22540]: https://github.com/dart-lang/sdk/security/advisories/GHSA-3rfv-4jvg-9522
## 2.12.2 - 2021-03-17