DOMPurify 2.3.8

• Cleaned up a minor issue with the 2.3.7 release, thanks @johnbirds

No other changes compared to 2.3.7 release, which entail:

• Fixes around a bug in Safari, thanks @sybrew
• Slightly improved performance, thanks @tiny-ben-tran
• Lots of chores, bumps and typo fixes, thanks @is2ei
• Removed unnecessary string trimming, thanks @christopherehlen

DOMPurify 2.3.6

• Added an option to allow HTML5 doctypes, thanks @tosmolka
• Bumped several dependencies, thanks @is2ei
• Updated documentation to cover recently added flags, thanks @is2ei

DOMPurify 2.3.5

• Performed several chores and cleanups, thanks @is2ei
• Fixed a bug when working with Trusted Types, thanks @tosmolka
• Fixed a bug with weird behavior on insecure nodes in IN_PLACE mode, thanks @tosmolka
• Added more SVG attributes to allow-list, thanks @rzhade3

DOMPurify 2.3.4

• Added support for Custom Elements, thanks @franktopel
• Added new config settings to control Custom Element sanitizing, thanks @franktopel
• Added faster clobber checks, thanks @GrantGryczan
• Allow-listed SVG feImage elements, thanks @ydaniv
• Updated test suite
• Update supported Node versions
• Updated README

DOMPurify 2.3.3

• Fixed a bug in the handing of PARSER_MEDIA_TYPE spotted by @securitum-mb
• Adjusted the tests for MSIE to make sure the results are as expected now

DOMPurify 2.3.2

• Added new config option PARSER_MEDIA_TYPE, thanks @tosmolka

DOMPurify 2.3.1

• Added code to make FORBID_CONTENTS setting configurable
• Added role to URI-safe attributes
• Added more paranoid handling for template elements

DOMPurify 2.3.0

• Added better handling of document creation on Firefox
• Added better handling of version numbers in license file
• Added two new browser versions to test suite config
• Fixed a bug with handling of custom data attributes

DOMPurify 2.2.9

• Fixed some minor issues related to the NAMESPACE config
• Fixed some minor issues relating to empty input
• Fixed some minor issues relating to handling of invalid XML

DOMPurify 2.2.8

• Added NAMESPACE config option, thanks @NateScarlet
• Added better fallback for older browsers & PhantomJS, thanks @albanx
• Extended allow-list for SVG attributes a bit