Skip to content

Releases: cure53/DOMPurify

DOMPurify 2.3.11

23 Aug 09:20
30af6c8
Compare
Choose a tag to compare
  • Added generated type definitions for better compatibility
  • Added SANITIZE_NAMED_PROPS config option, thanks @SoheilKhodayari
  • Updated README and config documentation, thanks @0xedward
  • Updated test suite with newer Node versions

DOMPurify 2.3.10

18 Jul 13:03
aedec31
Compare
Choose a tag to compare
  • Added support for sanitization of attributes requiring Trusted Types, thanks @tosmolka

DOMPurify 2.3.9

11 Jul 12:22
52c8eb1
Compare
Choose a tag to compare
  • Made TAG and ATTR config options case-sensitive when parsing XHTML, thanks @tosmolka
  • Bumped some dependencies, thanks @is2ei
  • Included github-actions in the dependabot config, thanks @nathannaveen

DOMPurify 2.3.8

13 May 13:58
dc6db2c
Compare
Choose a tag to compare
  • Cleaned up a minor issue with the 2.3.7 release, thanks @johnbirds

No other changes compared to 2.3.7 release, which entail:

DOMPurify 2.3.6

16 Feb 07:19
c84f6e4
Compare
Choose a tag to compare
  • Added an option to allow HTML5 doctypes, thanks @tosmolka
  • Bumped several dependencies, thanks @is2ei
  • Updated documentation to cover recently added flags, thanks @is2ei

DOMPurify 2.3.5

26 Jan 14:05
8eab0ac
Compare
Choose a tag to compare
  • Performed several chores and cleanups, thanks @is2ei
  • Fixed a bug when working with Trusted Types, thanks @tosmolka
  • Fixed a bug with weird behavior on insecure nodes in IN_PLACE mode, thanks @tosmolka
  • Added more SVG attributes to allow-list, thanks @rzhade3

DOMPurify 2.3.4

07 Dec 14:31
fff1bd5
Compare
Choose a tag to compare
  • Added support for Custom Elements, thanks @franktopel
  • Added new config settings to control Custom Element sanitizing, thanks @franktopel
  • Added faster clobber checks, thanks @GrantGryczan
  • Allow-listed SVG feImage elements, thanks @ydaniv
  • Updated test suite
  • Update supported Node versions
  • Updated README

DOMPurify 2.3.3

20 Sep 12:29
7fbe07c
Compare
Choose a tag to compare
  • Fixed a bug in the handing of PARSER_MEDIA_TYPE spotted by @securitum-mb
  • Adjusted the tests for MSIE to make sure the results are as expected now

DOMPurify 2.3.2

15 Sep 15:23
6fb973e
Compare
Choose a tag to compare
  • Added new config option PARSER_MEDIA_TYPE, thanks @tosmolka

DOMPurify 2.3.1

13 Aug 14:48
6cfcdf5
Compare
Choose a tag to compare
  • Added code to make FORBID_CONTENTS setting configurable
  • Added role to URI-safe attributes
  • Added more paranoid handling for template elements