Preparing 2.0.7 release

cure53 · Oct 16, 2019 · 42642ab · 42642ab
1 parent 39d6a3d
commit 42642ab
Show file tree

Hide file tree

Showing 9 changed files with 10 additions and 10 deletions.
diff --git a/README.md b/README.md
@@ -6,7 +6,7 @@
 
 DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.
 
-It's also very simple to use and get started with. DOMPurify was [started in February 2014](https://github.com/cure53/DOMPurify/commit/a630922616927373485e0e787ab19e73e3691b2b) and, meanwhile, has reached version 2.0.6.
+It's also very simple to use and get started with. DOMPurify was [started in February 2014](https://github.com/cure53/DOMPurify/commit/a630922616927373485e0e787ab19e73e3691b2b) and, meanwhile, has reached version 2.0.7.
 
 DOMPurify is written in JavaScript and works in all modern browsers (Safari, Opera (15+), Internet Explorer (10+), Edge, Firefox and Chrome - as well as almost anything else using Blink or WebKit). It doesn't break on MSIE6 or other legacy browsers. It either uses [a fall-back](#what-about-older-browsers-like-msie8) or simply does nothing.
 

diff --git a/bower.json b/bower.json
@@ -1,6 +1,6 @@
 {
   "name": "DOMPurify",
-  "version": "2.0.6",
+  "version": "2.0.7",
   "homepage": "https://github.com/cure53/DOMPurify",
   "author": "Cure53 <info@cure53.de>",
   "description": "A DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG",

diff --git a/dist/purify.cjs.js b/dist/purify.cjs.js
diff --git a/dist/purify.es.js b/dist/purify.es.js
diff --git a/dist/purify.js b/dist/purify.js
diff --git a/dist/purify.min.js b/dist/purify.min.js
diff --git a/package.json b/package.json
@@ -102,7 +102,7 @@
   },
   "name": "dompurify",
   "description": "DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's written in JavaScript and works in all modern browsers (Safari, Opera (15+), Internet Explorer (10+), Firefox and Chrome - as well as almost anything else using Blink or WebKit). DOMPurify is written by security people who have vast background in web attacks and XSS. Fear not.",
-  "version": "2.0.6",
+  "version": "2.0.7",
   "directories": {
     "test": "test"
   },

diff --git a/test/test-suite.js b/test/test-suite.js
@@ -638,7 +638,7 @@ module.exports = function(DOMPurify, window, tests, xssTests) {
       var config = {
         ADD_TAGS: ['xmp']
       };
-      var clean = DOMPurify.sanitize("x<noframes><svg><b><xmp><b title='</xmp><img src=x onerror=alert(1)>'>", config)
+      var clean = DOMPurify.sanitize("x<noframes><svg><b><xmp><b title='</xmp><img>", config)
       assert.contains(clean, [
           "x"
       ]);

diff --git a/website/index.html b/website/index.html
@@ -2,7 +2,7 @@
 <html>
     <head>
         <meta charset="UTF-8">
-        <title>DOMPurify 2.0.6 "Turbo Yak"</title>
+        <title>DOMPurify 2.0.7 "Giga Yak"</title>
         <script src="../dist/purify.min.js"></script>
         <!-- we don't actually need it - just to demo and test the $(html) sanitation -->
         <script src="//code.jquery.com/jquery-1.11.0.min.js"></script>
@@ -23,7 +23,7 @@
         </script>
     </head>
     <body>
-        <h4>DOMPurify 2.0.6 "Turbo Yak"</h4>
+        <h4>DOMPurify 2.0.7 "Giga Yak"</h4>
         <p>
             <a href="http://badge.fury.io/bo/dompurify"><img style="max-width:100%;" alt="Bower version" src="https://badge.fury.io/bo/dompurify.svg"></a> · <a href="http://badge.fury.io/js/dompurify"><img style="max-width:100%;" alt="npm version" src="https://badge.fury.io/js/dompurify.svg"></a> · <a href="https://travis-ci.org/cure53/DOMPurify"><img style="max-width:100%;" alt="Build Status" src="https://travis-ci.org/cure53/DOMPurify.svg?branch=master"></a>
         </p>