Releases: cure53/DOMPurify
Releases · cure53/DOMPurify
DOMPurify 2.4.7
- Fixed a licensing issue spotted and reported by @george-thomas-hill
DOMPurify 3.0.4
- Fixed a bypass in jsdom 22 in case the noframes element is permitted, thanks @leeN
- Fixed a typo with
shadowrootmod
which should beshadowrootmode
, thanks @masatokinugawa
DOMPurify 2.4.6
- Fixed a bypass in jsdom 22 in case the
noframes
element is permitted, thanks @leeN
DOMPurify 3.0.3
- Added new
TRUSTED_TYPES_POLICY
configuration option, thanks @dejang - Added
feDropShadow
to the SVG filter allow-list, thanks @SelfMadeSystem
DOMPurify 3.0.2
DOMPurify 3.0.1
- Fixed a problem with improper reset of custom HTML options, thanks @ammaraskar
DOMPurify 2.4.5
- Fixed a problem with improper reset of custom HTML options, thanks @ammaraskar
DOMPurify 3.0.0
- Removed all code that is for MSIE-only
- Removed all tests that are for MSIE-only
- Modified documentation to reflect new state of MSIE support
- Added support for
ALLOW_SELF_CLOSE_IN_ATTR
flag, thanks @edg2s @AndreVirtimo - Added better support for
shadowrootmode
, thanks @mfreed7
NOTE Please use the 2.4.4 release if you still need MSIE support, 3.0.0 comes without the MSIE overhead
DOMPurify 2.4.4
- Added support for
ALLOW_SELF_CLOSE_IN_ATTR
flag, thanks @edg2s @AndreVirtimo - Added better support for
shadowrootmode
, thanks @mfreed7
DOMPurify 2.4.3
- Final release that is compatible with MSIE10 & MSIE 11