Skip to content

dompurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @Akokonunes
  • Updated several development dependencies and CI workflow actions