chore: publish mathjs v11.9.1

2026-01-25 15:07:57 +00:00 · 2023-07-24 12:47:40 +02:00 · 2023-07-24 12:47:40 +02:00 · f816bef1e5
commit f816bef1e5
parent 00fa54cb95
27 changed files with 51 additions and 44 deletions
--- a/download.md
+++ b/download.md
@ -27,7 +27,7 @@ Math.js can be downloaded or linked from various content delivery networks:
  <tbody>
    <tr>
      <td>unpkg</td>
-      <td><a href="https://unpkg.com/mathjs@11.9.0/">https://unpkg.com/mathjs@11.9.0/</a></td>
+      <td><a href="https://unpkg.com/mathjs@11.9.1/">https://unpkg.com/mathjs@11.9.1/</a></td>
    </tr>
    <tr>
      <td>cdnjs</td>
@ -48,9 +48,9 @@ Or download the full bundle directly from [unpkg](https://unpkg.com):

 <p>
    <a 
-      href="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"
-    >math.js (version 11.9.0, <span id="size">197 kB</span>, minified and gzipped)</a> 
-    and if needed the <a href="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js.map">source map</a>
+      href="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"
+    >math.js (version 11.9.1, <span id="size">197 kB</span>, minified and gzipped)</a> 
+    and if needed the <a href="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js.map">source map</a>
 </p>

 Too large for you? Create your own [custom bundle](docs/custom_bundling.html).
--- a/examples/browser/angle_configuration.html
+++ b/examples/browser/angle_configuration.html
@ -15,7 +15,7 @@
    }
  </style>

-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>
 </head>
 <body>

--- a/examples/browser/angle_configuration.html.md
+++ b/examples/browser/angle_configuration.html.md
@ -24,7 +24,7 @@ File: [angle_configuration.html](angle_configuration.html) (click for a live dem
    }
  </style>

-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>
 </head>
 <body>

--- a/examples/browser/basic_usage.html
+++ b/examples/browser/basic_usage.html
@ -3,7 +3,7 @@
 <head>
  <meta charset="utf-8">
  <title>math.js | basic usage</title>
-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>
 </head>
 <body>

--- a/examples/browser/basic_usage.html.md
+++ b/examples/browser/basic_usage.html.md
@ -12,7 +12,7 @@ File: [basic_usage.html](basic_usage.html) (click for a live demo)
 <head>
  <meta charset="utf-8">
  <title>math.js | basic usage</title>
-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>
 </head>
 <body>

--- a/examples/browser/currency_conversion.html
+++ b/examples/browser/currency_conversion.html
@ -4,7 +4,7 @@
  <meta charset="utf-8">
  <title>math.js | currency conversion</title>

-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>

  <style>
    body,
--- a/examples/browser/currency_conversion.html.md
+++ b/examples/browser/currency_conversion.html.md
@ -13,7 +13,7 @@ File: [currency_conversion.html](currency_conversion.html) (click for a live dem
  <meta charset="utf-8">
  <title>math.js | currency conversion</title>

-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>

  <style>
    body,
--- a/examples/browser/custom_separators.html
+++ b/examples/browser/custom_separators.html
@ -15,7 +15,7 @@
    }
  </style>

-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>
 </head>
 <body>

--- a/examples/browser/custom_separators.html.md
+++ b/examples/browser/custom_separators.html.md
@ -24,7 +24,7 @@ File: [custom_separators.html](custom_separators.html) (click for a live demo)
    }
  </style>

-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>
 </head>
 <body>

--- a/examples/browser/plot.html
+++ b/examples/browser/plot.html
@ -3,7 +3,7 @@
 <head>
  <meta charset="utf-8">
  <title>math.js | plot</title>
-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>

  <script src="https://cdn.plot.ly/plotly-1.35.2.min.js"></script>

--- a/examples/browser/plot.html.md
+++ b/examples/browser/plot.html.md
@ -12,7 +12,7 @@ File: [plot.html](plot.html) (click for a live demo)
 <head>
  <meta charset="utf-8">
  <title>math.js | plot</title>
-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>

  <script src="https://cdn.plot.ly/plotly-1.35.2.min.js"></script>

--- a/examples/browser/pretty_printing_with_mathjax.html
+++ b/examples/browser/pretty_printing_with_mathjax.html
@ -4,7 +4,7 @@
  <meta charset="utf-8">
  <title>math.js | pretty printing with MathJax</title>

-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>
  <script src="https://polyfill.io/v3/polyfill.min.js?features=es6"></script>
  <script src="https://cdn.jsdelivr.net/npm/mathjax@3/es5/tex-svg.js"></script>

--- a/examples/browser/pretty_printing_with_mathjax.html.md
+++ b/examples/browser/pretty_printing_with_mathjax.html.md
@ -13,7 +13,7 @@ File: [pretty_printing_with_mathjax.html](pretty_printing_with_mathjax.html) (cl
  <meta charset="utf-8">
  <title>math.js | pretty printing with MathJax</title>

-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>
  <script src="https://polyfill.io/v3/polyfill.min.js?features=es6"></script>
  <script src="https://cdn.jsdelivr.net/npm/mathjax@3/es5/tex-svg.js"></script>

--- a/examples/browser/printing_html.html
+++ b/examples/browser/printing_html.html
@ -4,7 +4,7 @@
 	<meta charset="utf-8">
 	<title>math.js | printing HTML</title>

-	<script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+	<script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>

 	<style>
 		body {
--- a/examples/browser/printing_html.html.md
+++ b/examples/browser/printing_html.html.md
@ -13,7 +13,7 @@ File: [printing_html.html](printing_html.html) (click for a live demo)
 	<meta charset="utf-8">
 	<title>math.js | printing HTML</title>

-	<script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+	<script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>

 	<style>
 		body {
--- a/examples/browser/requirejs_loading.html
+++ b/examples/browser/requirejs_loading.html
@ -9,7 +9,7 @@

 <script>
  // load math.js using require.js
-  require(['https://unpkg.com/mathjs@11.9.0/lib/browser/math.js'], function (math) {
+  require(['https://unpkg.com/mathjs@11.9.1/lib/browser/math.js'], function (math) {
    // evaluate some expression
    const result = math.evaluate('1.2 * (2 + 4.5)')
    document.write(result)
--- a/examples/browser/requirejs_loading.html.md
+++ b/examples/browser/requirejs_loading.html.md
@ -18,7 +18,7 @@ File: [requirejs_loading.html](requirejs_loading.html) (click for a live demo)

 <script>
  // load math.js using require.js
-  require(['https://unpkg.com/mathjs@11.9.0/lib/browser/math.js'], function (math) {
+  require(['https://unpkg.com/mathjs@11.9.1/lib/browser/math.js'], function (math) {
    // evaluate some expression
    const result = math.evaluate('1.2 * (2 + 4.5)')
    document.write(result)
--- a/examples/browser/rocket_trajectory_optimization.html
+++ b/examples/browser/rocket_trajectory_optimization.html
@ -5,7 +5,7 @@
  <meta charset="utf-8">
  <title>math.js | rocket trajectory optimization</title>

-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>
  <script src="https://cdnjs.cloudflare.com/ajax/libs/Chart.js/2.5.0/Chart.min.js"></script>

  <style>
--- a/examples/browser/rocket_trajectory_optimization.html.md
+++ b/examples/browser/rocket_trajectory_optimization.html.md
@ -14,7 +14,7 @@ File: [rocket_trajectory_optimization.html](rocket_trajectory_optimization.html)
  <meta charset="utf-8">
  <title>math.js | rocket trajectory optimization</title>

-  <script src="https://unpkg.com/mathjs@11.9.0/lib/browser/math.js"></script>
+  <script src="https://unpkg.com/mathjs@11.9.1/lib/browser/math.js"></script>
  <script src="https://cdnjs.cloudflare.com/ajax/libs/Chart.js/2.5.0/Chart.min.js"></script>

  <style>
--- a/examples/browser/webworkers/index.md
+++ b/examples/browser/webworkers/index.md
@ -92,7 +92,7 @@ File: [webworkers.html](webworkers.html) (click for a live demo)
 File: [worker.js](worker.js)

 ```js
-importScripts('https://unpkg.com/mathjs@11.9.0/lib/browser/math.js')
+importScripts('https://unpkg.com/mathjs@11.9.1/lib/browser/math.js')

 // create a parser
 const parser = self.math.parser()
--- a/examples/browser/webworkers/worker.js
+++ b/examples/browser/webworkers/worker.js
@ -1,4 +1,4 @@
-importScripts('https://unpkg.com/mathjs@11.9.0/lib/browser/math.js')
+importScripts('https://unpkg.com/mathjs@11.9.1/lib/browser/math.js')

 // create a parser
 const parser = self.math.parser()
--- a/history.md
+++ b/history.md
@ -4,6 +4,13 @@ layout: default

 <h1 id="history">History <a href="#history" title="Permalink">#</a></h1>

+<h1 id="20230724-1191">2023-07-24, 11.9.1 <a href="#20230724-1191" title="Permalink">#</a></h1>
+
+- Fix a security vulnerability in `FunctionNode` and `SymbolNode` allowing
+  arbitrary code execution via `math.evaluate`. Thanks Harry Chen.
+- Fix <a href="https://github.com/josdejong/mathjs/issues/3001">#3001</a>: mathjs bundle containing `new Function(...)` (CSP issue).
+
+
 <h1 id="20230719-1190">2023-07-19, 11.9.0 <a href="#20230719-1190" title="Permalink">#</a></h1>

 - Implement function `solveODE`  <a href="https://github.com/josdejong/mathjs/issues/2958">#2958</a>). Thanks <a href="https://github.com/dvd101x">@dvd101x</a>.
--- a/js/lib/math.js
+++ b/js/lib/math.js
--- a/js/lib/math.js.LICENSE.txt
+++ b/js/lib/math.js.LICENSE.txt
@ -23,8 +23,8 @@
 * It features real and complex numbers, units, matrices, a large set of
 * mathematical functions, and a flexible expression parser.
 *
- * @version 11.9.0
- * @date    2023-07-19
+ * @version 11.9.1
+ * @date    2023-07-24
 *
 * @license
 * Copyright (C) 2013-2023 Jos de Jong <wjosdejong@gmail.com>
--- a/js/lib/math.js.map
+++ b/js/lib/math.js.map
--- a/package-lock.json
+++ b/package-lock.json
@ -8,7 +8,7 @@
      "name": "mathjs-website",
      "version": "1.0.0",
      "dependencies": {
-        "mathjs": "11.9.0"
+        "mathjs": "11.9.1"
      },
      "devDependencies": {
        "fancy-log": "2.0.0",
@ -22,9 +22,9 @@
      }
    },
    "node_modules/@babel/runtime": {
-      "version": "7.22.5",
-      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.22.5.tgz",
-      "integrity": "sha512-ecjvYlnAaZ/KVneE/OdKYBYfgXV3Ptu6zQWmgEF7vwKhQnvVS6bjMD2XYgj+SNvQ1GfK/pjgokfPkC/2CO8CuA==",
+      "version": "7.22.6",
+      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.22.6.tgz",
+      "integrity": "sha512-wDb5pWm4WDdF6LFUde3Jl8WzPA+3ZbxYqkC6xAXuD3irdEHN1k0NfTRrJD8ZD378SJ61miMLCqIOXYhd8x+AJQ==",
      "dependencies": {
        "regenerator-runtime": "^0.13.11"
      },
@ -3033,11 +3033,11 @@
      }
    },
    "node_modules/mathjs": {
-      "version": "11.9.0",
-      "resolved": "https://registry.npmjs.org/mathjs/-/mathjs-11.9.0.tgz",
-      "integrity": "sha512-LiFu1CwSRA9r9RUbb8swLOs5fpORB2suTDDMV//2zCbl6s97Rq3InGMsJfUvY4MFBJ1e0T2j7M3PrlPWtTMSiQ==",
+      "version": "11.9.1",
+      "resolved": "https://registry.npmjs.org/mathjs/-/mathjs-11.9.1.tgz",
+      "integrity": "sha512-VdB9ELZ6Dwda13j5d1eCBETmPO8m9qIJETUdfZmTA9cPnXUiIk7UuoAmvxFqtfAe32XYuRugAec2Ndv0/RfRhg==",
      "dependencies": {
-        "@babel/runtime": "^7.22.5",
+        "@babel/runtime": "^7.22.6",
        "complex.js": "^2.1.1",
        "decimal.js": "^10.4.3",
        "escape-latex": "^1.2.0",
@ -4773,9 +4773,9 @@
  },
  "dependencies": {
    "@babel/runtime": {
-      "version": "7.22.5",
-      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.22.5.tgz",
-      "integrity": "sha512-ecjvYlnAaZ/KVneE/OdKYBYfgXV3Ptu6zQWmgEF7vwKhQnvVS6bjMD2XYgj+SNvQ1GfK/pjgokfPkC/2CO8CuA==",
+      "version": "7.22.6",
+      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.22.6.tgz",
+      "integrity": "sha512-wDb5pWm4WDdF6LFUde3Jl8WzPA+3ZbxYqkC6xAXuD3irdEHN1k0NfTRrJD8ZD378SJ61miMLCqIOXYhd8x+AJQ==",
      "requires": {
        "regenerator-runtime": "^0.13.11"
      }
@ -7255,11 +7255,11 @@
      }
    },
    "mathjs": {
-      "version": "11.9.0",
-      "resolved": "https://registry.npmjs.org/mathjs/-/mathjs-11.9.0.tgz",
-      "integrity": "sha512-LiFu1CwSRA9r9RUbb8swLOs5fpORB2suTDDMV//2zCbl6s97Rq3InGMsJfUvY4MFBJ1e0T2j7M3PrlPWtTMSiQ==",
+      "version": "11.9.1",
+      "resolved": "https://registry.npmjs.org/mathjs/-/mathjs-11.9.1.tgz",
+      "integrity": "sha512-VdB9ELZ6Dwda13j5d1eCBETmPO8m9qIJETUdfZmTA9cPnXUiIk7UuoAmvxFqtfAe32XYuRugAec2Ndv0/RfRhg==",
      "requires": {
-        "@babel/runtime": "^7.22.5",
+        "@babel/runtime": "^7.22.6",
        "complex.js": "^2.1.1",
        "decimal.js": "^10.4.3",
        "escape-latex": "^1.2.0",
--- a/package.json
+++ b/package.json
@ -6,7 +6,7 @@
    "url": "https://github.com/josdejong/mathjs.git"
  },
  "dependencies": {
-    "mathjs": "11.9.0"
+    "mathjs": "11.9.1"
  },
  "devDependencies": {
    "fancy-log": "2.0.0",