Packages

@lwc/engine-server

9.5.3 · 27 Oct 2026MIT173.6k / weekRepositoryHomepagenpmAtom feed

Your version

1.7.9

22 Jul 2020Where it was published

1.18.0 is the newest release of 1.x.

npm marks 1.7.9 as deprecated: This package has been replaced by @lwc/ssr-runtime

In short

1 security3 changed

  • security

    #1972 - engine-server: Escape HTML entities from dynamic text and dynamic attributes to prevent potential XSS.

Release note

Bug Fixes

  • security

    #1972 - engine-server: Escape HTML entities from dynamic text and dynamic attributes to prevent potential XSS.

  • #1977 - engine-server: The isConnected property was refactored to accurately reflect the connectedness of the component.

  • #1986 - template-compiler: Tag names are now considered to determine whether or not an attribute is boolean. This fixes the incorrect assumption that all boolean attributes are HTML global attributes. Removes capture from the list of boolean attributes to align with the spec.

Internal

  • #1980: Specify node as the default type at the root level to prevent unwanted ambient types from being loaded.