DOMPurify 3.0.7

• Added better protection against CSPP attacks, thanks @kevin-mizu
• Updated browser versions for automated tests
• Updated Node versions for automated tests
• Refactored code base, thanks @ssi02014
• Refactored build system & deployment, thanks @ssi02014

DOMPurify 3.0.6

• Refactored the core code-base and several utilities, thanks @ssi02014
• Updated and fixed several sections of the README, thanks @ssi02014
• Updated several outdated build and test dependencies

DOMPurify 3.0.5

• Fixed a licensing issue spotted and reported by @george-thomas-hill
• Updated several build and test dependencies

DOMPurify 2.4.7

• Fixed a licensing issue spotted and reported by @george-thomas-hill

DOMPurify 3.0.4

• Fixed a bypass in jsdom 22 in case the noframes element is permitted, thanks @leeN
• Fixed a typo with shadowrootmod which should be shadowrootmode, thanks @masatokinugawa

DOMPurify 2.4.6

• Fixed a bypass in jsdom 22 in case the noframes element is permitted, thanks @leeN

DOMPurify 3.0.3

• Added new TRUSTED_TYPES_POLICY configuration option, thanks @dejang
• Added feDropShadow to the SVG filter allow-list, thanks @SelfMadeSystem

DOMPurify 3.0.2

• Fixed an issue with ALLOWED_URI_REGEXP not being reset, thanks @mukilane
• Added mprescripts tag to allowed MathML elements, thanks @duyhai94
• Added SMS URI scheme to allowed URI schemes, tanks @Kiwka
• Updated supported browser versions for nicer code and smaller size, thanks @buzinas

DOMPurify 3.0.1

• Fixed a problem with improper reset of custom HTML options, thanks @ammaraskar

DOMPurify 2.4.5

• Fixed a problem with improper reset of custom HTML options, thanks @ammaraskar