Skip to content

Releases: cure53/DOMPurify

DOMPurify 3.1.6

05 Jul 13:06
4083a90
Compare
Choose a tag to compare
  • Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @kevin-mizu
  • Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks @realansgar
  • Fixed a minor problem with the bower file pointing to the wrong dist path
  • Fixed several minor typos in docs, comments and comment blocks, thanks @Rotzbua
  • Updated several development dependencies

DOMPurify 2.5.6

05 Jul 13:04
d78f241
Compare
Choose a tag to compare
  • Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @kevin-mizu
  • Fixed a minor problem with the bower file pointing to the wrong dist path
  • Updated several development dependencies

DOMPurify 3.1.5

31 May 09:22
6676133
Compare
Choose a tag to compare
  • Fixed a minor issue with the dist paths in bower.js, thanks @HakumenNC
  • Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @kakao-bishop-cho

DOMPurify 2.5.5

31 May 09:10
de2545c
Compare
Choose a tag to compare
  • Fixed a minor issue with the dist paths in bower.js, thanks @HakumenNC
  • Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @kakao-bishop-cho

DOMPurify 3.1.4

20 May 11:16
7517e9c
Compare
Choose a tag to compare
  • Fixed an issue with the recently implemented isNaN checks, thanks @tulach
  • Added several new popover attributes to allow-list, thanks @Gigabyte5671
  • Fixed the tests and adjusted the test runner to cover all branches

DOMPurify 2.5.4

20 May 11:08
10c1261
Compare
Choose a tag to compare
  • Fixed a bug with latest isNaN checks affecting MSIE, thanks @tulach
  • Fixed the tests for MSIE and fixed related test-runner

DOMPurify 3.1.3

11 May 12:00
3fe78d7
Compare
Choose a tag to compare
  • Fixed several mXSS variations found by and thanks to @kevin-mizu & @Ry0taK
  • Added better configurability for comment scrubbing default behavior
  • Added better hardening against Prototype Pollution attacks, thanks @kevin-mizu
  • Added better handling and readability of the nodeType property, thanks @ssi02014
  • Fixed some smaller issues in README and other documentation

DOMPurify 2.5.3

11 May 10:21
Compare
Choose a tag to compare
  • Fixed several mXSS variations found by and thanks to @kevin-mizu & @Ry0taK
  • Added better configurability for comment scrubbing default behavior
  • Added better hardening against Prototype Pollution attacks, thanks @kevin-mizu
  • Fixed some smaller issues in README and other documentation

DOMPurify 3.1.2

30 Apr 08:28
5b2e317
Compare
Choose a tag to compare
  • Addressed and fixed a mXSS variation found by @kevin-mizu
  • Addressed and fixed a mXSS variation found by Adam Kues of Assetnote
  • Updated tests for older Safari and Chrome versions

DOMPurify 2.5.2

30 Apr 08:26
d299fcc
Compare
Choose a tag to compare
  • Addressed and fixed a mXSS variation found by @kevin-mizu
  • Addressed and fixed a mXSS variation found by Adam Kues of Assetnote
  • Updated tests for older Safari and Chrome versions