Skip to content

DOMPurify 3.4.6

Choose a tag to compare

View all tags
@cure53 cure53 released this 26 May 13:04
· 232 commits to main since this release
3.4.6
This tag was signed with the committer’s verified signature.
cure53 Cure53
GPG key ID: 5F0CDACD24BB6BF4
Verified
Learn about vigilant mode.
bb7739e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • Fixed several issues with DOM Clobbering in IN_PLACE mode, thanks @offset & @Bankde
  • Hardened the checks for cross-realm IN_PLACE and Shadow DOM sanitization, thanks @offset & @Bankde
  • Added more test coverage for IN_PLACE and general DOM Clobbering attacks
  • Bumped several dependencies where possible

Contributors

Bankde and offset
Assets 11
Loading