简报·YT

← 返回 GitHub 动态

hakimel/reveal.js · ⭐ 已Star 已完成

hakimel/reveal.js 6.0.2

2026-09-10 15:41 · ⭐ 7.2万 · GitHub Release 原文 ↗

#安全修复 #性能优化 #移动适配

hakimel/reveal.js 6.0.2

注：本次提供的内容是 GitHub Release Notes 而非视频文字稿，因此按 Release Notes 的要求输出。

一句话概括：6.0.2 是一个以安全和稳定性为主的补丁版本，修复了 postMessage 引发的跨域 XSS 漏洞、Markdown 列表属性、离屏幻灯片焦点、捏合缩放误触等问题，并提升滚动视图性能与移动端控件适配。

变更要点

安全修复（重要）：修复了通过 postMessage API 触发的跨域 XSS 漏洞，做法是校验 iframe preview URL 的合法性。建议所有使用预览/嵌入场景的用户尽快升级。
Markdown 修复：当列表与属性之间用空行分隔时，属性会被错误地应用到最后一个列表项而不是整个列表，现已修正（#3931）。
可访问性修复：阻止处于屏幕外的幻灯片（offscreen slides）获取键盘焦点（#1587），避免焦点跳到不可见内容上。
手势修复：修复 pinch-to-zoom（捏合缩放）手势被误判为切换幻灯片的问题。
滚动视图性能修复：修复滚动过程中幻灯片反复加载/卸载的问题，同时整体改善了幻灯片布局与 scroll view 的性能。
移动端适配：导航控件（navigation controls）、进度条（progress bar）和媒体按钮会按移动端视口进行缩放。
渲染细节：幻灯片缩放比例（slide scale）统一四舍五入到小数点后两位，减少浮点误差带来的布局抖动。
依赖与构建要求（潜在 breaking change）：更新依赖以修补安全漏洞；现在构建和开发 reveal.js 需要 Node.js 22.12 或更高版本，低版本 Node 的开发者环境将无法正常构建，需先升级运行时。
完整变更记录：https://github.com/hakimel/reveal.js/compare/6.0.1...6.0.2

▸ Release Notes 英文原文（801 字符）

## Changes * Fix cross-origin XSS through the postMessage API by validating iframe preview URLs * Fix Markdown attributes targeting the last list item instead of the whole list when separated by a blank line #3931 * Prevent offscreen slides from receiving keyboard focus #1587 * Fix pinch-to-zoom gestures incorrectly triggering slide changes * Improve slide layout and scroll view performance * Fix slides repeatedly loading and unloading while scrolling * Scale navigation controls, progress bars and media buttons for mobile viewports * Round slide scale to two decimal places * Update dependencies to address security vulnerabilities. Building and developing reveal.js now requires Node.js 22.12 or later **Full Changelog**: https://github.com/hakimel/reveal.js/compare/6.0.1...6.0.2

▸ 主项目介绍 · hakimel/reveal.js

▸ README 原文（同步于 2026-07-23 00:34）

<p align="center"> <a href="https://revealjs.com"> <img src="https://hakim-static.s3.amazonaws.com/reveal-js/logo/v1/reveal-black-text-sticker.png" alt="reveal.js" width="500"> </a> <br><br> <a href="https://github.com/hakimel/reveal.js/actions"><img src="https://github.com/hakimel/reveal.js/workflows/tests/badge.svg"></a> <a href="https://slides.com/"><img src="https://static.slid.es/images/slides-github-banner-320x40.png?1" alt="Slides" width="160" height="20"></a> </p> reveal.js is an open source HTML presentation framework. It enables anyone with a web browser to create beautiful presentations for free. Check out the live demo at [revealjs.com](https://revealjs.com/). The framework comes with a powerful feature set including [nested slides](https://revealjs.com/vertical-slides/), [Markdown support](https://revealjs.com/markdown/), [Auto-Animate](https://revealjs.com/auto-animate/), [PDF export](https://revealjs.com/pdf-export/), [speaker notes](https://revealjs.com/speaker-view/), [LaTeX typesetting](https://revealjs.com/math/), [syntax highlighted code](https://revealjs.com/code/) and an [extensive API](https://revealjs.com/api/). --- Want to create reveal.js presentation in a graphical editor? Try <https://slides.com>. It's made by the same people behind reveal.js. --- ### Getting started - 🚀 [Install reveal.js](https://revealjs.com/installation) - 👀 [View the demo presentation](https://revealjs.com/demo) - 📖 [Read the documentation](https://revealjs.com/markup/) - 🖌 [Try the visual editor for reveal.js at Slides.com](https://slides.com/) - 🎬 [Watch the reveal.js video course (paid)](https://revealjs.com/course) --- <div align="center"> MIT licensed | Copyright © 2011-2026 Hakim El Hattab, https://hakim.se </div>