Skip to content

DOMPurify 3.1.3
Compare
Choose a tag to compare
@cure53 cure53 released this 11 May 12:00
· 8 commits to main since this release
3.1.3
3fe78d7
This commit was signed with the committer’s verified signature.
cure53 Cure53
GPG key ID: 5F0CDACD24BB6BF4
Learn about vigilant mode.
  • Fixed several mXSS variations found by and thanks to @kevin-mizu & @Ry0taK
  • Added better configurability for comment scrubbing default behavior
  • Added better hardening against Prototype Pollution attacks, thanks @kevin-mizu
  • Added better handling and readability of the nodeType property, thanks @ssi02014
  • Fixed some smaller issues in README and other documentation

Contributors

kevin-mizu, Ry0taK, and ssi02014
Assets 2