Releases: cure53/DOMPurify
Releases · cure53/DOMPurify
DOMPurify 2.3.11
- Added generated type definitions for better compatibility
- Added SANITIZE_NAMED_PROPS config option, thanks @SoheilKhodayari
- Updated README and config documentation, thanks @0xedward
- Updated test suite with newer Node versions
DOMPurify 2.3.10
- Added support for sanitization of attributes requiring Trusted Types, thanks @tosmolka
DOMPurify 2.3.9
- Made TAG and ATTR config options case-sensitive when parsing XHTML, thanks @tosmolka
- Bumped some dependencies, thanks @is2ei
- Included github-actions in the dependabot config, thanks @nathannaveen
DOMPurify 2.3.8
- Cleaned up a minor issue with the 2.3.7 release, thanks @johnbirds
No other changes compared to 2.3.7 release, which entail:
- Fixes around a bug in Safari, thanks @sybrew
- Slightly improved performance, thanks @tiny-ben-tran
- Lots of chores, bumps and typo fixes, thanks @is2ei
- Removed unnecessary string trimming, thanks @christopherehlen
DOMPurify 2.3.6
DOMPurify 2.3.5
DOMPurify 2.3.4
- Added support for Custom Elements, thanks @franktopel
- Added new config settings to control Custom Element sanitizing, thanks @franktopel
- Added faster clobber checks, thanks @GrantGryczan
- Allow-listed SVG
feImage
elements, thanks @ydaniv - Updated test suite
- Update supported Node versions
- Updated README
DOMPurify 2.3.3
- Fixed a bug in the handing of
PARSER_MEDIA_TYPE
spotted by @securitum-mb - Adjusted the tests for MSIE to make sure the results are as expected now
DOMPurify 2.3.2
- Added new config option
PARSER_MEDIA_TYPE
, thanks @tosmolka
DOMPurify 2.3.1
- Added code to make
FORBID_CONTENTS
setting configurable - Added
role
to URI-safe attributes - Added more paranoid handling for template elements