0.77.0

[alexanderleegs]

What's Changed

• 0.76.0 by @dcshzj in 0.76.0 #1803
• fix(dompurify): further limit src by @kishore03109 in fix(dompurify): further limit src #1809
• feat/addBrokenLinksReporter by @kishore03109 in feat/addBrokenLinksReporter #1810
• feat/feature-flag-link-checker by @kishore03109 in feat/feature-flag-link-checker #1811

Full Changelog: v0.76.0...v0.77.0

Tests

• put in the following content into the markdown files

Allowed script 

<script src="//www.instagram.com/embed.js" async="true"></script>

Disallowed in csp

<script src="//www.evil.com/embed.js" async="true"></script>

Allowed in csp but should also be controlled

<script src="//www.blah.cloudfront.net/embed.js" async="true"></script>


Attributes not allowed 

<svg><script src="/jquery/jquery.min.js" href="THISFILEWILLBELOADED"></script></svg>
<svg><script src="/jquery/jquery.min.js" xlink:href="THISFILEWILLBELOADED"></script></svg>

• press save

• accept the disclaimer if it pops up

• post save, only one of the 3 script tags should persist

• Log in to staging via github

• Access the page /sites//linkCheckerReport for any site here

• Verify that the content is loading, and you are able to access the page in staging + you are able to go into a valid edit page

• Verify that when you click on the breadcrumbs on the side, it leads to the correct table (ie what was done in the video above)

• When accessing /sites/<your-site-name>/linkCheckerReport on staging, it should result in a redirect back to the dashboard.
  IMPORTANT so as to not trip off alarms

• When feature flag is off, no network calls should be made to getLinkCheckerStatus in the backend