Skip to content

0.5.8 (2026-06-18)

SVG export, export modal redesign, and security fixes (DOM XSS + container OpenSSL).

✨ Features

  • SVG export: download your diagrams as clean, scalable vectors (Mermaid, PlantUML, D2, DBML). The ideal format for embedding in docs/READMEs or further editing in vector tools.

💅 UI improvements

  • Redesigned export modal: formats are shown as a 2×2 card grid (PNG, SVG, PDF, Markdown), content options are grouped into a compact secondary section, and the source-code download moves to a subtle footer button — resulting in a far less cluttered interface.

🔒 Security

  • DOM-based XSS (Snyk, Medium): rendered SVG is now sanitized with DOMPurify (sanitizeSvg) before being injected via innerHTML in the preview, editor, and shared diagram views. Mermaid output (rendered with securityLevel: 'loose') is sanitized just like server-rendered SVG.
  • Rendered Markdown descriptions for PDF/PNG export are sanitized (sanitizeRichHtml) before innerHTML assignment.
  • The frontend Docker image now runs apk upgrade to pick up the latest Alpine OpenSSL security patches (CVE-2026-* reported by Snyk Container), matching the backend image.

♻️ Refactors

  • The export modal was extracted into a dedicated ExportDiagramModal component.