Skip to content

DOMPurify 3.4.17

Latest
Latest

Choose a tag to compare

View all tags
@cure53 cure53 released this 12 Oct 12:37
· 292 commits to main since this release
3.4.17
This tag was signed with the committer’s verified signature.
cure53 Cure53
GPG key ID: 5F0CDACD24BB6BF4
Verified
Learn about vigilant mode.
a77a3e7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @manus-pi
  • Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @uttej-badwane
  • Fixed the SMIL attributeName guard in XHTML mode, thanks @Koukyosyumei
  • Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @Artiphishell
  • Added a purify-edge test runner as a compatibility check, thanks @anzal1
  • Clarified the IN_PLACE documentation in the README about possible risks
  • Updated several dependencies

Contributors

uttej-badwane, Koukyosyumei, and 3 other contributors
Assets 11
Loading