[Security release] Swagger UI 3.18.0 Released!

⚠️ This release contains security fixes. If your OpenAPI documents link to untrusted external URLs, you should upgrade.

Interface changes:

• You may experience issues with this version if you're importing Swagger UI in a non-browser environment (which we don't officially support). Consider loading JSDom beforehand, so that Swagger UI has the DOM APIs it needs access to.
• Links throughout Swagger UI now render with rel="noopener noreferrer", which blocks linked pages from accessing window.opener and the Referrer header.

Changelog:

• feature: "Send empty value" controls for allowEmptyValue parameters (via #4788)
• bugfix(security): anchor tag safety (via #4789)
• bugfix: default to empty object for pathItems in updateJsonSpec wrap-action (via #4785)

Swagger UI 3.17.6 Released!

Interface changes: none.

Changelog:

• improvement: allow viewing model when Try-It-Out is enabled (via #4723)
• bugfix(try-it-out): stringify numerical initial values in ParameterRow (via #4767)

Swagger UI 3.17.5 Released!

Interface changes: none.

Changelog:

• improvement: refactor Operation component structure (via #4686)
• improvement: bundle size reductions (#4713)
• housekeeping: add http-server as a dev-dependency, need for serve-static. (via #4728)

Swagger UI 3.17.4 Released!

Interface changes: none.

Changelog:

• improvement: encode query string value for validator badge url (via #4724)
• bugfix: handle example value according to specifications (via #4730)
• bugfix: OAS3 array item value input (via #4729)

---

• housekeeping: remove Q&A section from feature template (via #4708)
• housekeeping: improve e2e test stability (via #4721)
• housekeeping: add anchors to configuration parameter documentation (via #4711)

Swagger-UI 3.17.3 Released!

Interface changes: none.

Changelog:

• improvement: stop loading resources from third party CDN (via #4598)
• improvement: handle more invalid Swagger/OpenAPI version values gracefully (via #4699)
• bugfix: exchange function name of component Try-it-out (via #4687)
• bugfix: handle formencoded array data correctly (via #4704)
• bugfix: don't stringify non-object sample values (via #4704)
• bugfix: support multimedia media types for file upload (#4705)
• housekeeping: add extraneous module linting (via #4697)
• housekeeping: migrate back to reselect@2 (via #4696)
• housekeeping: use bundlesize for status checks (via #4701)

Swagger-UI 3.17.2 Released!

Interface changes: none.

Changelog:

• improvement: hash-keyed Try-It-Out parameter value storage (via #4670)
• improvement: re-enable and improve Models jump-to-path (via #4671)
• bugfix: respect null values in examples (via #4679)
• housekeeping: update & clean up various dependencies (via #4543)

Swagger UI 3.17.1 Released!

Interface changes: BaseLayout was changed - if you've copied it into your application, you can copy over the new, simplified version.

Changelog:

• improvement: use HTTPS for Petstore (via #4652)
• bugfix: nested object schema sample generation (via #4648)
• housekeeping: simplify BaseLayout by creating new container components (via #4604)
• reverted: dev-only performance tracking (via #4636)

Swagger-UI 3.17.0 Released!

Interface changes: none.

Changelog:

• feature: helpful render gating based on document version (via #4614)
• fix: disable empty values for required + enumerated params (via #4615)
• fix: initially unset required booleans (via #4613)
• fix: don't nest urls configuration via docker (via #4601)
• housekeeping: refactor deep linking into <OperationTag> (via #4349)

Swagger-UI 3.16.0 Released!

Interface changes: none.

Changelog:

• feature: OAS3 form and binary media support (via #4592)
• improvement: disable mangling in the npm module build (via #4583)
• improvement: resolve URLs for validation service against the page location (via #4580)
• improvement: add npm start script (via #4572)

Swagger-UI 3.15.0 Released!

Interface changes: Docker images are now tagged without a leading v, e.g. 3.15.0 instead of v3.15.10.

Changelog:

• feature: OAS3 object parameter Try-It-Out support (via #4563)
• improvement: drop leading v from Docker image names (via #4567)
• bugfix: remove href from Swagger logo (via #4566)
• bugfix: respect OAS3 parameter default values (via $4561)