jQuery 4.0.0 BETA!

Posted on by

jQuery 4.0.0 has been in the works for a long time, but it is now ready for a beta release! There’s a lot to cover, and the team is excited to see it released. We’ve got bug fixes, performance improvements, and some breaking changes. We removed support for IE<11 after all! Still, we expect disruption to be minimal.

Many of the breaking changes are ones the team has wanted to make for years, but couldn’t in a patch or minor release. We’ve trimmed legacy code, removed some previously-deprecated APIs, removed some internal-only parameters to public functions that were never documented, and dropped support for some “magic” behaviors that were overly complicated.

We will publish a comprehensive upgrade guide before final release, to outline the removed code and how to migrate. The jQuery Migrate plugin will also be ready to assist. For now, please try out the beta release and let us know if you encounter any issues.

As usual, the release is available on our CDN and the npm package manager. Third party CDNs will not be hosting this beta release, but will host the 4.0.0 final release later. Here are some highlights for jQuery 4.0.0 beta.

Goodbye IE<11

jQuery 4.0 drops support for IE 10 and older. Some may be asking why we didn’t remove support for IE 11. We plan to remove support in stages, and the next step will be released in jQuery 5.0. For now, we’ll start by removing code specifically supporting IE versions older than 11, giving us a size reduction of 867 gzipped bytes in one PR!

We also dropped support for other very old browsers, including Edge Legacy, iOS <11, Firefox <65, and Android Browser. No changes should be required on your end. If you need to support any of these browsers, simply stick with jQuery 3.x.

Deprecated APIs removed

These functions have been deprecated for several versions. It’s time to remove them now that we’ve reached a major release. These functions were either always meant to be internal or ones that now have native equivalents in all supported browsers. The removed functions are:

push, sort, and splice removed

The jQuery prototype has long had Array methods that did not behave like any other jQuery methods and were always meant for internal-use only. These methods are push, sort, and splice. We switched our uses of these methods to Array functions instead of the jQuery prototype. For example, $elems.push( elem ) became [].push.call( $elems, elem ). We’re mentioning it here in case there are any plugins out there that may have relied on these methods.

focusin and focosout event order

For a long time, browsers did not agree on the order of focus and blur events, which includes focusin, focusout, focus, and blur. Finally, the latest versions of all browsers that jQuery 4.0 supports have converged on a common event order. Unfortunately, it differs from the consistent order that jQuery had chosen years ago, which makes this a breaking change. At least everyone is the on the same page now!

jQuery’s order for all four events in previous versions was:

1. focusout
2. blur
3. focusin
4. focus

Starting with jQuery 4.0, we no longer override native behavior. This means that all browsers except IE will follow the current W3C specification, which is:

1. blur
2. focusout
3. focus
4. focusin

For those that are curious, the W3C specification previously defined a different order:

1. focusout
2. focusin
3. blur
4. focus

But, few thought that intuitive and the spec was changed in 2023 to match what browsers have already implemented. Ironically, the only browser to ever follow the old spec was Internet Explorer.

FormData support

jQuery.ajax has added support for binary data, including FormData. Previously, binary data was not a known data type and was converted to a string. That behavior could be disabled by disabling data conversion and handling the data manually, but we decided to make this work automatically. This is technically a breaking change, but should be closer to expected behavior.

Automatic JSONP promotion removed

Previously, jQuery.ajax with dataType: "json" with a provided callback would be converted to a JSONP request. Today, the preferred way to interact with a cross-domain backend is with CORS, which works in all browsers that jQuery 4.0 supports. This should help avoid unexpected behavior in case a developer is unaware that code can be executed from a remote domain with JSONP.

jQuery source migrated to ES modules

It was a special day when the jQuery source on the main branch was migrated from AMD to ES modules. The jQuery source has always been published with jQuery releases on npm and GitHub, but could not be imported directly as modules without RequireJS, which was jQuery’s build tool of choice. We have since switched to Rollup for packaging jQuery and we do run all tests on the ES modules separately.

Trusted Types and CSP

jQuery 4.0 adds support for Trusted Types, ensuring that HTML wrapped in TrustedHTML can be used as input to jQuery manipulation methods in a way that doesn’t violate the require-trusted-types-for Content Security Policy directive.

Along with this, while some AJAX requests were already using <script> tags to maintain attributes such as crossdomain, we have since switched most asynchronous script requests to use <script> tags to avoid any CSP errors caused by using inline scripts. There are still a few cases where XHR is used for asynchronous script requests, such as when the "headers" option is passed (use scriptAttrs instead!), but we now use a <script> tag whenever possible.

Updated slim build

The slim build has gotten even smaller in jQuery 4.0.0 with the removal of Deferreds and Callbacks (now below 20k bytes gzipped!). Deferreds have long-supported the Promises A+ standard, so native Promises can be used instead in most cases and they are available in all of jQuery’s supported browsers except IE11. Deferreds do have some extra features that native Promises do not support, but most usage can be migrated to Promise methods. If you need to support IE11, it’s best to use the main build or add a polyfill for native Promises.


You can get the files from the jQuery CDN, or link to them directly:



You can also get this release from npm:

npm install jquery@4.0.0-beta

Slim build

Sometimes you don’t need ajax, or you prefer to use one of the many standalone libraries that focus on ajax requests. And often it is simpler to use a combination of CSS and class manipulation for web animations. Finally, all of jQuery’s supported browsers (except for IE11) now have support for native Promises across the board, so Deferreds and Callbacks are no longer needed in most cases. Along with the regular version of jQuery that includes everything, we’ve released a “slim” version that excludes these modules. The size of jQuery is very rarely a load performance concern these days, but the slim build is about 8k gzipped bytes smaller than the regular version. These files are also available in the npm package and on the CDN:



These updates are already available as the current versions on npm and Bower. Information on all the ways to get jQuery is available at https://jquery.com/download/. Public CDNs receive their copies today, please give them a few days to post the files. If you’re anxious to get a quick start, use the files on our CDN until they have a chance to update.


Thank you to all of you who participated in this release by submitting patches, reporting bugs, or testing, including Alex, Ahmed S. El-Afifi, fecore1, Dallas Fraser, Richard Gibson, Michał Gołębiowski-Owczarek, Pierre Grimaud, Gabriela Gutierrez, Jonathan, Necmettin Karakaya, Anders Kaseorg, Wonseop Kim, Simon Legner, Shashanka Nataraj, Pat O’Callaghan, Christian Oliff, Dimitri Papadopoulos Orfanos, Wonhyoung Park, Bruno PIERRE, Baoshuo Ren, Beatriz Rezener, Sean Robinson, Ed Sanders, Timo Tijhof, Tom, Christian Wenz, ygj6 and the whole jQuery team.

We’re on Mastodon!

jQuery now has its very own Mastodon account. We will be cross posting to both Twitter and Mastodon from now on. Also, you may be interested in following some of our team members that have Mastodon accounts.

jQuery: https://social.lfx.dev/@jquery

mgol: https://hachyderm.io/@mgol

timmywil: https://hachyderm.io/@timmywil


Full changelog: 4.0.0-beta


  • Don’t treat array data as binary (992a1911)
  • Allow `processData: true` even for binary data (ce264e07)
  • Support binary data (including FormData) (a7ed9a7b)
  • Support `headers` for script transport even when cross-domain (#5142, 6d136443)
  • Support `null` as success functions in `jQuery.get` (#4989, 74978b7e)
  • Don’t auto-execute scripts unless dataType provided (#4822, 025da4dd)
  • Make responseJSON work for erroneous same-domain JSONP requests (68b4ec59)
  • Execute JSONP error script responses (#4771, a1e619b0)
  • Avoid CSP errors in the script transport for async requests (#3969, 07a8e4a1)
  • Drop the json to jsonp auto-promotion logic (#1799, #3376, e7b3bc48)
  • Overwrite s.contentType with content-type header value, if any (#4119, 7fb90a6b)
  • Deprecate AJAX event aliases, inline event/alias into deprecated (23d53928)
  • Do not execute scripts for unsuccessful HTTP responses (#4250, 50871a5a)
  • Simplify jQuery.ajaxSettings.xhr (#1967, abdc89ac)


  • Shave off a couple of bytes (b40a4807)
  • Don’t stringify attributes in the setter (#4948, 4250b628)
  • Drop the `toggleClass(boolean|undefined)` signature (#3388, a4421101)
  • Refactor val(): don’t strip carriage return, isolate IE workarounds (ff281991)
  • Don’t set the type attr hook at all outside of IE (9e66fe9a)


  • set up periodic code scanning analysis (39c5778c)


  • migrate grunt authors to a custom script (af79c999)
  • Bump follow-redirects from 1.15.1 to 1.15.4 (56139394)
  • Bump actions/setup-node and github/codeql-action (99151d7a)
  • Reformat GitHub workflow Yaml files (c98597ea)
  • Bump @babel/traverse & multiple actions (fb0cc272)
  • Don’t run CI push workflows for dependabot branches (635cb152)
  • Update ESLint-related packages, fix linting errors (f47c6a83)
  • Run pretest before test:* npm scripts (1ad66aeb)
  • sort branches in compare_size; last run last (a7fa303f)
  • run pretest in jenkins script (cb763072)
  • fix inconsistent builds in Node 20 (7ef9099d)
  • add commit SHAs and last runs to comparisons (09972bcc)
  • add new factory files to dist eslint (79223841)
  • Bump qs, socket.io-parser, socket.io & json5 (b923047d)
  • migrate most grunt tasks off of grunt (2bdecf8b)
  • Bump actions/checkout, actions/setup-node & github/codeql-action (42e50f8c)
  • Update mailmap entry for Krinkle (699bcd39)
  • replace CRLF with LF during minify (48cc402a)
  • Add `exports` to package.json, export slim & esm builds (#4592, 8be4c0e4)
  • Switch form Terser to SWC for JS minification (#5286) (#5285, e2421875)
  • Make sure `*.cjs` & `*.mjs` files use UNIX line endings as well (198b41c8)
  • switch preferred email for timmywil (2b6b5e0a)
  • Bump github/codeql-action & actions/checkout (4a13266e)
  • Drop individual AMD modules (5701957b)
  • Reference GitHub Actions by commit SHAs (#5266, 784b9ba6)
  • Switch the minifier from UglifyJS to Terser (27303c6b)
  • Make the `eslint:dev` task not lint the `dist/` folder (44906a83)
  • Test on Node.js 20, stop testing on Node.js 14 & 19 (6616acff)
  • Only install Playwright dependencies when needed (e77bd9d6)
  • Bump actions/setup-node from 3.5.1 to 3.6.0 (7e7bd062)
  • Run GitHub Action browser tests on Playwright WebKit (b02a257f)
  • Migrate middleware-mockserver to modern JS (ce90a484)
  • remove stale Insight package from custom builds (c66d4700)
  • Limit permissions for GitHub workflows (c909d6b1)
  • Test on Node.js 18 & 19, stop testing on Node 12 (f62d8e21)
  • Bump actions/setup-node from 3.5.0 to 3.5.1 (0208224b)
  • Update Grunt from 1.4.1 to 1.5.3 (aa231cd2)
  • Bump actions/setup-node from 3.4.1 to 3.5.0 (25400750)
  • Update GitHub Actions (52f452b2)
  • Add dependabot.yml config (GitHub Actions) (3f8bb2a4)
  • Test on Node 17, update Grunt & `karma-*` packages (2525cffc)
  • Separate the install step from running tests in GitHub Actions (eef97250)
  • remove travis.yml and travis mentions from core (#4983) (5f4d449a)
  • Migrate CI to GitHub Actions (e23190e6)
  • Update ESLint & eslint-plugin-import, fixing the build (9735edd5)
  • Test on Node.js 16 instead of 15 (0f623fdc)
  • Take core-js-bundle from the external directory as well (345cd22e)
  • Restore the external directory (a684e6ba)
  • Rename master to main across the repository (8ae477a4)
  • Test on Node.js 15 (6984d174)
  • Explicitly exclude the queue module from the slim build (a503c691)
  • Make the import/no-unused-modules ESLint rule work in WebStorm (8612018d)
  • Append .eslintignore paths to grunt eslint paths (a22b43ba)
  • Use the US spelling of “favor” (fa0058af)
  • Fix commitplease husky config (#4735, 3a1b338a)
  • Update dependencies (b5028669)
  • Event: Make sure all source modules’ exports are used (#4648) (40c3abd0)
  • Update eslint-config-jquery, fix linting violations (ef4d6ca6)
  • Followups after introducing ES modules compiled via Rollup (55cd3a44)
  • Correct code indentations based on jQuery Style Guide (3d62d570)
  • Reduce the slim build header comment & jQuery.fn.jquery (812b4a1a)
  • Move ESLint max-len disable-directive to dist/.eslintrc.json (34296ec5)
  • Test on Node.js 14, stop testing on Node.js 8 & 13 (88eb22e0)
  • Enable reportUnusedDisableDirectives in ESLint (46f9810b)
  • Resolve Travis config warnings (5b94a4f8)
  • Enable ESLint one-var rule for var declarations in browser code (4a7fc854)
  • Add Christian Oliff to .mailmap & AUTHORS.txt (721744a9)
  • Lint the minified jQuery file as well – a Gruntfile fix (#3075, 338f1fc7)
  • Lint the minified jQuery file as well (#3075, 89a18de6)
  • Add intuitive names to Travis jobs (e1fab109)
  • Make dev mode work in Karma again, serve source files from disk (437f389a)
  • Tests: Fix custom build tests, verify on Travis (0f780ba7)
  • Create a `grunt custom:slim` alias for the Slim build (#4578) (9b9ed469)
  • Make Karma work in ES modules mode (341c6d1b)
  • Auto-convert sources to AMD (f37c2e51)
  • Fix the Windows build (#4548, 9fd2fa53)
  • Require extensions for ES6 imports, prevent import cycles (44ac8c85)
  • Fix the import path to serialize.js from ajax.js (07532014)
  • Run tests on Travis only on browsers defined in the config (bcbcdd2b)
  • Run tests on Firefox ESR as well (2d5ad6d2)
  • Run tests on Node.js 13 in addition to 8, 10 & 12 (830976e6)
  • Run tests on Travis on FirefoxHeadless as well (584835e6)
  • Require strict mode in Node.js scripts via ESLint (bbad821c)
  • Support jquery-release –dry-run flag (d7d0b52b)
  • Stop copying src/core.js to dist on release (#4489, 9a4d9806)
  • Remove the external directory, read from node_modules directly (d7e64190)
  • ESLint: forbid unused function parameters (438b1a3e)
  • Fix the regex parsing AMD var-modules (#4389) (9ec09c3b)
  • Fix AMD dependencies in curCSS (b220f6df)
  • Test on Node.js 12, stop testing on Node.js 6 & 11 (b8d47128)
  • Fix unresolved jQuery reference in finalPropName (#4358, 87403058)
  • Update Sizzle from 2.3.3 to 2.3.4 (#1756, #4170, #4249, 0b2c36ad)
  • Update the master version to 4.0.0-pre (c4f2fa2f)
  • Update Sinon from 2.3.7 to 7.3.1, other updates (fea7a2a3)


  • Add more info about named exports (5f869590)
  • Simplify code post browser support reduction (93ca49e6)
  • Move the factory to separate exports (46f6e3da)
  • Use named exports in `src/` (#5262, f75daab0)
  • Fix regression in jQuery.text() on HTMLDocument objects (#5264, a75d6b52)
  • Selector: Move jQuery.contains from the selector to the core module (024d8719)
  • Drop the root parameter of jQuery.fn.init (d2436df3)
  • Don’t rely on splice being present on input (9c6f64c7)
  • Manipulation: Add basic TrustedHTML support (#4409, de5398a6)
  • Report browser errors in parseXML (#4784, 89697325)
  • Make jQuery.isXMLDoc accept falsy input (#4782, fd421097)
  • Drop support for Edge Legacy (i.e. non-Chromium Microsoft Edge) (#4568, e35fb62d)
  • Fire iframe script in its context, add doc param in globalEval (#4518, 4592595b)
  • Exclude callbacks & deferred modules in the slim build as well (fbc44f52)
  • Migrate from AMD to ES modules 🎉 (d0ce00cd)
  • Use Array.prototype.flat where supported (#4320, 9df4f1de)
  • Remove private copies of push, sort & splice from the jQuery prototype (b59107f5)
  • Implement .even() & .odd() to replace POS :even & :odd (78420d42)
  • Deprecate jQuery.trim (#4363, 5ea59460)
  • Remove IE-specific support tests, rely on document.documentMode (#4386, 3527a384)
  • Drop support for IE <11, iOS <11, Firefox <65, Android Browser & PhantomJS (#3950, #4299, cf84696f)
  • Remove deprecated jQuery APIs (#4056, 58f0c00b)


  • Fix reliableTrDimensions support test for initially hidden iframes (b1e66a5f)
  • Selector: Align with 3.x, remove the outer `selector.js` wrapper (53cf7244)
  • Make the reliableTrDimensions support test work with Bootstrap CSS (#5270, 65b85031)
  • Make `offsetHeight( true )`, etc. include negative margins (#3982, bce13b72)
  • Return `undefined` for whitespace-only CSS variable values (#5120) (7eb00196)
  • Don’t trim whitespace of undefined custom property (#5105, ed306c02)
  • Skip falsy values in `addClass( array )`, compress code (#4998, a338b407)
  • Justify use of rtrim on CSS property values (655c0ed5)
  • Trim whitespace surrounding CSS Custom Properties values (#4926, efadfe99)
  • Include `show`, `hide` & `toggle` methods in the jQuery slim build (297d18dd)
  • Remove the opacity CSS hook (865469f5)
  • Workaround buggy getComputedStyle on table rows in IE/Edge (#4490, 26415e08)
  • Don’t automatically add “px” to properties with a few exceptions (#2795, 00a9c2e5)


  • Refactor to reduce size (805cdb43)
  • Event:Manipulation: Prevent collisions with Object.prototype (#3256, 9d76c0b1)
  • Separate data & css/effects camelCase implementations (#3355, 8fae2120)



  • Define `.hover()` using non-deprecated methods (fd6ffc5e)
  • Remove jQuery.trim (0b676ae1)
  • Fix AMD parameter order (f810080e)


  • Add offset prop fallback to FF for unreliable TR dimensions (#4529, 3bbbc111)


  • Fix module links in the package README (ace646f6)
  • update watch task in CONTRIBUTING.md (77d6ad71)
  • Fix typos found by codespell (620870a1)
  • remove stale gitter badge from readme (67cb1af7)
  • Remove the “Grunt build” section from the PR template (988a5684)
  • Remove stale badge from README (bcd9c2bc)
  • Update the README of the published package (edccabf1)
  • Remove git.io from a GitHub Actions comment (016872ff)
  • Update webpack website in README (01819bc3)
  • add link to patchwelcome and help wanted issues (924b7ce8)
  • add link to preview the new CLAs (683ceb8f)
  • Fix incorrect `trac-NUMBER` references (eb9ceb2f)
  • remove expired links from old jquery source (#4997) (ed066ac7)
  • Remove links to Web Archive from source (#4981, e24f2dcf)
  • Replace `#NUMBER` Trac issue references with `trac-NUMBER` (5d5ea015)
  • Update the URL to the latest jQuery build in CONTRIBUTING.md (9bdb16cd)
  • Remove the CLA checkbox in the pull request template (e1248931)
  • update irc to Libera and fix LAMP dead link (175db73e)
  • Update Frequently Reported Issues in the GitHub issue template (7a6fae6a)
  • Change JS Foundation mentions to OpenJS Foundation (11611967)
  • add SECURITY.md, show security email address (2ffe54ca)
  • Fix typos (1a7332ce)
  • Update the link to the jsdom repository (a62309e0)
  • Use https for hyperlinks in README (73415da2)
  • Remove a mention of the event/alias.js module from README (3edfa1bc)
  • Update links to EdgeHTML issues to go through Web Archive (1dad1185)
  • direct users to GitHub docs for cloning the repo (f1c16de2)
  • Change OS X to macOS in README (5a3e0664)
  • Update most URLs to HTTPS (f09d9210)
  • Convert link to Homebrew from HTTP to HTTPS (e0022f23)


  • Fix a unnecessary conditional statement in .stop() (#4374, 110802c7)



  • Avoid collisions between jQuery.event.special & Object.prototype (bcaeb000)
  • Simplify the check for saved data in leverageNative (dfe212d5)
  • Make trigger(focus/blur/click) work with native handlers (#5015, 6ad3651d)
  • Simulate focus/blur in IE via focusin/focusout (#4856, #4859, #4950, ce60d318)
  • Don’t break focus triggering after `.on(focus).off(focus)` (#4867, e539bac7)
  • Make focus re-triggering not focus the original element back (#4382, dbcffb39)
  • Don’t crash if an element is removed on blur (#4417, 5c2d0870)
  • Remove the event.which shim (#3235, 1a5fff4c)
  • remove jQuery.event.global (18db8717)
  • Only attach events to objects that accept data – for real (#4397, d5c505e3)
  • Stop shimming focusin & focusout events (#4300, 8a741376)
  • Prevent leverageNative from registering duplicate dummy handlers (eb6c0a7c)
  • Fix handling of multiple async focus events (#4350, ddfa8376)


  • Generalize a test to support IE (88690ebf)
  • Support $el.html(selfRemovingScript) (#5378) (#5377, 937923d9)
  • Extract domManip to a separate file (ee6e8740)
  • Don’t remove HTML comments from scripts (#4904, 2f8f39e4)
  • Respect script crossorigin attribute in DOM manipulation (#4542, 15ae3614)
  • Avoid concatenating strings in buildFragment (9c98e4e8)
  • Make jQuery.htmlPrefilter an identity function (90fed4b4)
  • Selector: Use the nodeName util where possible to save size (4504fc3d)


  • use buildDefaultFiles directly and pass version (b507c864)
  • copy dist-module folder as well (63767650)
  • only published versioned files to cdn (3a0ca684)
  • remove scripts and dev deps from dist package.json (7eac932d)
  • update build command in Release.generateArtifacts (3b963a21)
  • add support for md5 sums in windows (f088c366)
  • remove the need to install grunt globally (b2bbaa36)
  • upgrade release dependencies (967af732)
  • Remove an unused chalk dependency (bfb6897c)
  • Use an in-repository dist README fixture (358b769a)
  • Update AUTHORS.txt (1b74660f)
  • update AUTHORS.txt (cf9fe0f6)


  • Make `selector.js` module depend on `attributes/attr.js` (#5379, e06ff088)
  • Eliminate `selector.js` depenencies from various modules (e8b7db4b)
  • Re-expose jQuery.find.{tokenize,select,compile,setDocument} (#5259, 338de359)
  • Stop relying on CSS.supports( “selector(…)” ) (#5194, 68aa2ef7)
  • Backport jQuery selection context logic to selector-native (#5185, 2e644e84)
  • Make selector lists work with `qSA` again (#5177, 09d988b7)
  • Implement the `uniqueSort` chainable method (#5166, 5266f23c)
  • Re-introduce selector-native.js (4c1171f2)
  • Manipulation: Fix DOM manip within template contents (#5147, 3299236c)
  • Drop support for legacy pseudos, test custom pseudos (8c7da22c)
  • Use jQuery `:has` if `CSS.supports(selector(…))` non-compliant (#5098, d153c375)
  • Remove the “a:enabled” workaround for Chrome <=77 (c1ee33ad)
  • Make empty attribute selectors work in IE again (#4435, 05184cc4)
  • Use shallow document comparisons in uniqueSort (#4441, 15750b0a)
  • Add a test for throwing on post-comma invalid selectors (6eee5f7f)
  • Make selectors with leading combinators use qSA again (ed66d5a2)
  • Use shallow document comparisons to avoid IE/Edge crashes (#4441, aa6344ba)
  • reduce size, simplify setDocument (29a9544a)
  • Leverage the :scope pseudo-class where possible (#4453, df6a7f7f)
  • Bring back querySelectorAll shortcut usage (cef4b731)
  • Inline Sizzle into the selector module (47835965)
  • Port Sizzle tests to jQuery (79b74e04)


  • ensure display is set to block for the support div (#4832, 09f25436)


  • Disable the “:lang respects escaped backslashes” test (#5271, 62b9a258)
  • Indicate Chrome 112 & Safari 16.4 pass the cssHas support test (89ef81f8)
  • Test AJAX deprecated event aliases properly (cff28998)
  • Indicate Firefox 106+ passes the `cssSupportsSelector` test (716130e0)
  • Remove a workaround for a Firefox XML parsing issue (e7ffe1f1)
  • Fix the link to QUnit CSS file (8cf39b78)
  • Exclude tests based on compilation flags, not API presence (#5069, fae5fee8)
  • Workaround an XML parsing bug in Firefox (af1cd6f2)
  • lock colors version to 1.4.0 (9603b3c8)
  • Skip ETag AJAX tests on TestSwarm (00c060d1)
  • Allow statusText to be “success” in AJAX tests (19ced963)
  • Make Karma browser timeout larger than the QUnit one (4fd6912b)
  • Don’t remove csp.log in the cspClean action of mock.php (1019074f)
  • Load the TestSwarm listener via HTTPS (d225639a)
  • Switch background image from online file to local 1×1.jpg (482f8462)
  • Strip untypical callback parameter characters from mock.php (a7027463)
  • Make more tests run natively in Chrome & Firefox (50e8e846)
  • Fix tests for not auto-executing scripts without dataType (d38528b1)
  • Recognize callbacks with dots in the Node.js mock server (df6858df)
  • Skip the “jQuery.ajax() on unload” test in Safari (c18dc496)
  • Remove an unused local variable (82b87f6f)
  • Remove remaining obsolete jQuery.cache references (d96111e1)
  • Workaround failures in recent XSS tests in iOS 8 – 12 (11066a9e)
  • Add tests for recently fixed manipulation XSS issues (dc06d68b)
  • Use only one focusin/out handler per matching window & document (9b732043)
  • Fix flakiness in the “jQuery.ajax() – JSONP – Same Domain” test (7b0864d0)
  • Pass a number of necessary done() calls to assert.async() (364476c3)
  • Remove obsolete jQuery data tests (eb35be52)
  • Skip a “width/height on a table row with phantom borders” test in Firefox (a612733b)
  • Don’t test synchronous XHR on unload in Chrome (323575fb)
  • Stop using jQuery.find in tests (1d624c10)
  • Port changes from Sizzle (ac5f7cd8)
  • Fix a comment in testinit.js (7bdf307b)
  • update npo.js and include unminified source instead (b334ce77)
  • Restrict an event test fallback to TestSwarm (bde53edc)
  • Fix the new focusin/focusout test in IE (6f2fae7c)
  • Fix the core-js polyfill inclusion method (2e4b79ab)


  • Fix `contents()` on `<object>`s with children in IE (ccbd6b93)
  • Fix `contents()` on `<object>`s with children (#4384, 4d865d96)