Skip to content

DOMPurify 3.4.14

Latest

Choose a tag to compare

@cure53 cure53 released this 19 Aug 10:18
· 264 commits to main since this release
3.4.14
4e6fe24
  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @alirezarouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @Akokonunes
  • Updated several development dependencies and CI workflow actions