UniversalHtmlViewer 1.0.32.19
What's Changed
- Add inline CSP source allowlists by @PrzemyslawKlys in #84
Full Changelog: Compare v1.0.32.18 to v1.0.32.19
Project
UltimateHtmlViewer
SPFx web part for hosting HTML dashboards in modern SharePoint pages, with deep-link navigation, inline rendering, security controls, and deployment automation.
Stars15
Forks1
Open issues2
NuGet downloads
Releasev1.0.32.20
Language: TypeScript Updated: 2026-05-09
Install
Commands generated from catalog metadata.
Source checkout
git clone https://github.com/EvotecIT/UltimateHtmlViewer.gitDownloads
Package feeds and release channels for this project.
Changelog
Release notes generated from GitHub Releases, not a repository CHANGELOG.md file.
UniversalHtmlViewer 1.0.32.18
What's Changed
- Package catalog icon as client asset by @PrzemyslawKlys in #83
Full Changelog: Compare v1.0.32.17 to v1.0.32.18
UniversalHtmlViewer 1.0.32.17
What's Changed
- Populate SharePoint catalog metadata by @PrzemyslawKlys in #82
Full Changelog: Compare v1.0.32.16 to v1.0.32.17
UniversalHtmlViewer 1.0.32.16
What's Changed
- Use plain SharePoint app icon by @PrzemyslawKlys in #81
Full Changelog: Compare v1.0.32.15 to v1.0.32.16
UniversalHtmlViewer 1.0.32.15
What's Changed
- Fix SharePoint icon metadata by @PrzemyslawKlys in #80
Full Changelog: Compare v1.0.32.14 to v1.0.32.15
UniversalHtmlViewer 1.0.32.14
What's Changed
- chore(deps): bump picomatch in /spfx/UniversalHtmlViewer by @dependabot[bot] in #77
- chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 in /spfx/UniversalHtmlViewer by @dependabot[bot] in #76
- chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /spfx/UniversalHtmlViewer by @dependabot[bot] in #75
- chore(deps-dev): bump svgo from 2.8.0 to 2.8.2 in /spfx/UniversalHtmlViewer by @dependabot[bot] in #73
- chore(deps-dev): bump immutable from 4.3.7 to 4.3.8 in /spfx/UniversalHtmlViewer by @dependabot[bot] in #72
- chore(deps): bump @tootallnate/once and jest-environment-jsdom in /spfx/UniversalHtmlViewer by @dependabot[bot] in #74
- Improve SharePoint inline rendering for hosted HTML reports by @PrzemyslawKlys in #78
- Add SharePoint report browser option by @PrzemyslawKlys in #79
Full Changelog: Compare v1.0.31.9 to v1.0.32.14
UniversalHtmlViewer 1.0.31.9
What's Changed
- docs(security): refresh alert posture after release fix by @PrzemyslawKlys in #70
- fix: prevent inline report links from downloading after SharePoint FRE/runtime changes by @PrzemyslawKlys in #71
Full Changelog: Compare v1.0.31.0 to v1.0.31.9
UniversalHtmlViewer 1.0.31.0
What's Changed
- fix: harden UHV iframe lifecycle and deployment safeguards by @PrzemyslawKlys in #16
- fix(scripts): add tenant-boundary guards for deploy/setup URLs by @PrzemyslawKlys in #17
- feat(scripts): add -WhatIf support to deploy/setup/page entrypoints by @PrzemyslawKlys in #18
- fix(spfx): avoid detached-frame updates in nested hydration async flow by @PrzemyslawKlys in #19
- perf(spfx): debounce nested iframe mutation rescans by @PrzemyslawKlys in #20
- refactor(spfx): extract iframe load fallback lifecycle helper by @PrzemyslawKlys in #21
- fix(spfx): prevent stacked host scroll restore load listeners by @PrzemyslawKlys in #22
- fix(spfx): clear deferred scroll timers on dispose by @PrzemyslawKlys in #23
- test(spfx): add refresh lifecycle regressions for runtime base by @PrzemyslawKlys in #24
- chore(spfx): reduce audit exposure with webpack override refresh by @PrzemyslawKlys in #25
- docs(security): add remediation matrix and SPFx uplift spike runbook by @PrzemyslawKlys in #26
- chore(spfx): spike pass reduce audit highs via safe overrides by @PrzemyslawKlys in #27
- test(spfx): cover deferred scroll timeout dispose lifecycle by @PrzemyslawKlys in #28
- Docs: refresh security baseline and log blocked iteration-2 uplift by @PrzemyslawKlys in #29
- Fix UHV URL validation for backslash/encoded separator traversal by @PrzemyslawKlys in #30
- Fix UHV fallback query parser for fragments and equals by @PrzemyslawKlys in #31
- Fix UHV inline navigation for text-node click targets by @PrzemyslawKlys in #32
- Fix UHV validation for encoded/backslash dot-segment traversal by @PrzemyslawKlys in #33
- Test UHV iframe fallback guard paths and lifecycle cleanup by @PrzemyslawKlys in #34
- Test UHV iframe load-listener guard path cleanup by @PrzemyslawKlys in #35
- Fix UHV query parsing to preserve empty parameter values by @PrzemyslawKlys in #36
- Fix UHV deep-link builder for empty target URL edge case by @PrzemyslawKlys in #37
- Fix UHV tenant-config URL validation for mixed-case schemes by @PrzemyslawKlys in #38
- Test UHV inline-navigation click/protocol guard behavior by @PrzemyslawKlys in #39
- Fix UHV fallback query parsing for malformed-first values by @PrzemyslawKlys in #40
- Test UHV deep-link control-character sanitization paths by @PrzemyslawKlys in #41
- Fix UHV tenant-config runtime URL scheme consistency by @PrzemyslawKlys in #42
- Fix UHV tenant-config property-pane UX consistency by @PrzemyslawKlys in #43
- Fix UHV tenant-config URL handling for backslash paths by @PrzemyslawKlys in #44
- Fix UHV path validation for double-encoded dot-segment traversal by @PrzemyslawKlys in #45
- Harden tenant config merge, deep-link lock, retries, and Node 22 agent guidance by @PrzemyslawKlys in #46
- Add Node preflight guard and tenant config load diagnostics by @PrzemyslawKlys in #47
- feat: add optional strict inline CSP mode for inline HTML by @PrzemyslawKlys in #48
- fix: separate inline HTML cache by CSP mode by @PrzemyslawKlys in #49
- fix: allow history shim in strict inline CSP mode by @PrzemyslawKlys in #50
- fix: block traversal-like source paths in inline SharePoint loader by @PrzemyslawKlys in #51
- fix: cap Retry-After delays in inline SharePoint retries by @PrzemyslawKlys in #52
- fix: tighten inline source URL protocol guards by @PrzemyslawKlys in #53
- fix: prevent stale nested iframe hydration race overwrite by @PrzemyslawKlys in #54
- fix: clear nested iframe scroll reset timers on cleanup by @PrzemyslawKlys in #55
- test: add nested click-navigation stale race regression by @PrzemyslawKlys in #56
- chore: patch minimatch and fast-xml-parser transitive deps by @PrzemyslawKlys in #57
- chore: pin vulnerable ajv 8 resolved versions by @PrzemyslawKlys in #58
- feat: expose last inline content load error in diagnostics by @PrzemyslawKlys in #59
- feat: add nested hydration diagnostics counters by @PrzemyslawKlys in #60
- feat(spfx): add deep-link scroll lock release diagnostics by @PrzemyslawKlys in #61
- test(spfx): cover deep-link scroll lock release reasons by @PrzemyslawKlys in #62
- test(spfx): cover auto-stable and manual lock releases by @PrzemyslawKlys in #63
- fix(spfx): clear deep-link lock cleanup on auto release by @PrzemyslawKlys in #64
- chore(spfx): alias request to @cypress/request 3 by @PrzemyslawKlys in #65
- refactor(spfx): type deep-link lock release diagnostics by @PrzemyslawKlys in #66
- refactor(spfx): centralize deep-link diagnostics defaults by @PrzemyslawKlys in #67
- test(spfx): cover user interaction lock release path by @PrzemyslawKlys in #68
- test(spfx): cover ignored deep-link interaction cases by @PrzemyslawKlys in #69
Full Changelog: Compare v1.0.30.0 to v1.0.31.0
Consulting track
Need help taking this into production?
Platform Delivery Services
Support for rollout planning, operational design, remediation, and delivery around this project.
- Translate open-source tooling into production-ready operating patterns.
- Define rollout, ownership, reporting, and support boundaries early.
- Package the work so internal teams can operate it confidently.
We offer implementation, remediation, automation design, and delivery support around the platforms behind this project.