/ 
Text-JSContact-0.04

Changes for version 0.04 - 2026-10-22

  • security: strip control characters from vCard output; Text::VCardFast escapes LF but writes a CR raw, so a CR in any card field could end the content line early and forge extra properties. CR and CRLF now become LF (escaped as \n, or ^n in parameters) and control characters other than HTAB are dropped
  • add t/injection.t

Modules

Text::JSContact
Convert between vCard and JSContact (RFC 9553/9555)

Other files