You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
ArtifactsArea: what it touches
ImprovementsKind: in v2.1.248,
ImprovementsSection of the release
What
The sanitizer that strips scripts from generated artifacts now leaves alone any script that carries a src attribute, in addition to the application/json blocks it already kept.
Evidence
application/json
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
