Cure53🔓

DOMPurify 3.4.7 is out with again several in-depth improvements.

If you are using the IN_PLACE config option in production, you might want to go for this one soonish. This is where folks seem to use their Claude tokens for at the moment 😅

https://github.com/cure53/DOMPurify/releases/tag/3.4.7

Release DOMPurify 3.4.7 · cure53/DOMPurify

Hardened the handling of Shadow Roots when using IN_PLACE, thanks @GameZoneHacker Removed a problem leading to permanent hook pollution, thanks @offset Refactored the test suite and expanded test c...

GitHub
May 27 at 4:17pmWeb