[furcan]

Context

#100

• The issue described above very-well in detail.

Overpromised plainText option on all modules still allows JS execution.

Considered options

1. Fix it, together with bare-minimum changes, and considering supported browsers, regardless the Internet Explorer is dead.
2. Drop the plainText option entirely, and document why dropped, and let the consumers to do the "must" HTML-sanitisation, especially if they use Notiflix as a "proxy" notification API to allowing their end-users to cast their own messages.

Decided option

1. Fixing it.
   • Dropping the feature generally correct but will be a braking change that this library in LTS Maintenance mode, no need to increase the scope and impact.

Changes

• src: fix: Notiflix.js: commonGetPlaintext: prevent js execution
  • commits:
    • adb2433
    • c73b1e3 (reverted)
    • 0191964
• Package/Dev/Build/Dist: bump a new version as 3.3.0

Screenshots