v3.2.4: DOMPurify 3.2.4

Compare Source

• Fixed a conditional and config dependent mXSS-stylebypass reported by@​nsysean
• Added a new feature to allow specific hook removal, thanks@​davecardwell
• Addedpurify.js andpurify.min.js to exports, thanks@​Aetherinox
• Added better logic in case no window object is president, thanks@​yehuya
• Updated some dependencies called out by dependabot
• Updated license files etc to show the correct year

v3.2.3: DOMPurify 3.2.3

Compare Source

• Fixed two conditional sanitizer bypasses discovered by@​parrot409 and@​Slonser
• Updated the attribute clobbering checks to prevent future bypasses, thanks@​parrot409

v3.2.2: DOMPurify 3.2.2

Compare Source

• Fixed a possible bypass in case a rather specific config for custom elements is set, thanks@​yaniv-git
• Fixed several minor issues with the type definitions, thanks again@​reduckted
• Fixed a minor issue with the types reference for trusted types, thanks@​reduckted
• Fixed a minor problem with the template detection regex on some systems, thanks@​svdb99

v3.2.1: DOMPurify 3.2.1

Compare Source

• Fixed several minor issues with the type definitions, thanks@​reduckted@​ghiscoding@​asamuzaK@​MiniDigger
• Fixed an issue with non-minified dist files and order of imports, thanks@​reduckted

v3.2.0: DOMPurify 3.2.0

Compare Source

• Added type declarations, thanks@​reduckted ,@​philmayfield,@​aloisklink,@​ssi02014 and others
• Fixed a minor issue with the handling of hooks, thanks@​kevin-mizu

v3.1.7: DOMPurify 3.1.7

Compare Source

• Fixed an issue with comment detection and possible bypasses with specific config settings, thanks@​masatokinugawa
• Fixed several smaller typos in documentation and test & build files, thanks@​christianhg
• Added better support for Angular compiler, thanks@​jeroen1602
• Added several new attributes to HTML and SVG allow-list, thanks@​Gigabyte5671 and@​Rotzbua
• Removed theforeignObject element from the list of HTML entry-points, thanks@​masatokinugawa
• Bumped several dependencies to be more up to date

v3.1.6: DOMPurify 3.1.6

Compare Source

• Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks@​kevin-mizu
• Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks@​realansgar
• Fixed a minor problem with the bower file pointing to the wrong dist path
• Fixed several minor typos in docs, comments and comment blocks, thanks@​Rotzbua
• Updated several development dependencies