Skip to content

Releases: cure53/DOMPurify

DOMPurify 2.4.3

06 Jan 14:14
90326ef
Compare
Choose a tag to compare
  • Final release that is compatible with MSIE10 & MSIE 11

DOMPurify 2.4.2

06 Jan 13:07
Compare
Choose a tag to compare
  • Fixed a Trusted Types sink violation with empty input and NAMESPACE , thanks @tosmolka
  • Fixed a Prototype Pollution issue discovered and reported by @kevin-mizu

DOMPurify 2.4.1

10 Nov 14:01
67f784c
Compare
Choose a tag to compare
  • Added new config option ALLOWED_NAMESPACES for better XML handling, thanks @kevin-deyoungster @tosmolka
  • Added better detection of template literals when SAFE_FOR_TEMPLATES is true
  • Fixed an exception caused by DOM clobbering, thanks @masatokinugawa
  • Bumped some dependencies, thanks @marcpenya-tf

DOMPurify 2.4.0

24 Aug 17:34
5f8e875
Compare
Choose a tag to compare
  • Removed bundled types again as they caused too much trouble

DOMPurify 2.3.12

23 Aug 15:41
caaae5e
Compare
Choose a tag to compare

DOMPurify 2.3.11

23 Aug 09:20
30af6c8
Compare
Choose a tag to compare
  • Added generated type definitions for better compatibility
  • Added SANITIZE_NAMED_PROPS config option, thanks @SoheilKhodayari
  • Updated README and config documentation, thanks @0xedward
  • Updated test suite with newer Node versions

DOMPurify 2.3.10

18 Jul 13:03
aedec31
Compare
Choose a tag to compare
  • Added support for sanitization of attributes requiring Trusted Types, thanks @tosmolka

DOMPurify 2.3.9

11 Jul 12:22
52c8eb1
Compare
Choose a tag to compare
  • Made TAG and ATTR config options case-sensitive when parsing XHTML, thanks @tosmolka
  • Bumped some dependencies, thanks @is2ei
  • Included github-actions in the dependabot config, thanks @nathannaveen

DOMPurify 2.3.8

13 May 13:58
dc6db2c
Compare
Choose a tag to compare
  • Cleaned up a minor issue with the 2.3.7 release, thanks @johnbirds

No other changes compared to 2.3.7 release, which entail:

DOMPurify 2.3.6

16 Feb 07:19
c84f6e4
Compare
Choose a tag to compare
  • Added an option to allow HTML5 doctypes, thanks @tosmolka
  • Bumped several dependencies, thanks @is2ei
  • Updated documentation to cover recently added flags, thanks @is2ei