v1.1.7

Ordinarily, I would not have released this, but it includes a backport of a security fix from v2.0.3. If you're stuck on v1.x, you should really update to this ASAP.

Bug fixes

• core: Workaround for Internet Explorer bug when running in an iframe
• Fix prototype pollution vulnerability in m.parseQueryString (#2523 @isiahmeadows @Hunter-Dolan)