Skip to content

Releases: cure53/DOMPurify

DOMPurify 2.4.9

21 Mar 10:20
79cfb37
Compare
Choose a tag to compare
  • Fixed another conditional bypass caused by Processing Instructions, thanks @Ry0taK
  • Fixed the regex for HTML Custom Element detection, thanks @AlekseySolovey3T

DOMPurify 3.0.10

19 Mar 11:07
f2b637f
Compare
Choose a tag to compare
  • Fixed two possible bypasses when sanitizing an XML document and later using it in HTML, thanks @Slonser
  • Bumped up some build and test dependencies

DOMPurify 2.4.8

19 Mar 11:05
416ba67
Compare
Choose a tag to compare
  • Fixed two possible bypasses when sanitizing an XML document and later using it in HTML, thanks @Slonser

DOMPurify 3.0.9

20 Feb 14:31
699b1c9
Compare
Choose a tag to compare
  • Fixed a problem with proper detection of Custom Elements, thanks @kevin-mizu
  • Refactored the hasOwnProperty logic, thanks @ssi02014
  • Removed a superfluous console.warn making HappyDom happier, thanks @HugoPoi
  • Modernized some of the demo hooks for better looks, thanks @Steb95

DOMPurify 3.0.8

05 Jan 16:43
ec1346a
Compare
Choose a tag to compare
  • Fixed errors caused by conditional exports, thanks @ssi02014
  • Fixed a type error when working with custom element config, thanks @cpmotion

DOMPurify 3.0.7

03 Jan 12:08
aa2c561
Compare
Choose a tag to compare
  • Added better protection against CSPP attacks, thanks @kevin-mizu
  • Updated browser versions for automated tests
  • Updated Node versions for automated tests
  • Refactored code base, thanks @ssi02014
  • Refactored build system & deployment, thanks @ssi02014

DOMPurify 3.0.6

28 Sep 08:33
1b864e7
Compare
Choose a tag to compare
  • Refactored the core code-base and several utilities, thanks @ssi02014
  • Updated and fixed several sections of the README, thanks @ssi02014
  • Updated several outdated build and test dependencies

DOMPurify 3.0.5

11 Jul 08:00
c96c9df
Compare
Choose a tag to compare
  • Fixed a licensing issue spotted and reported by @george-thomas-hill
  • Updated several build and test dependencies

DOMPurify 2.4.7

11 Jul 07:42
ef731c0
Compare
Choose a tag to compare

DOMPurify 3.0.4

29 Jun 16:08
1777363
Compare
Choose a tag to compare
  • Fixed a bypass in jsdom 22 in case the noframes element is permitted, thanks @leeN
  • Fixed a typo with shadowrootmod which should be shadowrootmode, thanks @masatokinugawa