Repository navigation
This release is mostly to update DOMPurify to fix a potential XSS issue that can occur if a prototype pollution exploit exists, see: GHSA-v9jr-rg53-9pgp for more information. Thanks to David Vieira Kurz (hisolutions.com) for reporting.
This also fixes a bug with XHTML plugin RTL / LTR buttons (thanks to @arcalys) and adds some more tests (thanks to @live627).
Full Changelog
- Fixed bug with XHTML plugin style attribute being misspelled for RTL / LTR.
Thanks to @arcalys for fixing. - Updated DOMPurify to latest version to fix security issue if prototype pollution exploit is available.
Thanks to David Vieira Kurz (hisolutions.com) for reporting.
Contributors
arcalys and live627