Unclaimed project

Are you a maintainer of DOMPurify? Claim this project to take control of your public changelog and roadmap.

Changelog

DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

cure53/DOMPurify·

17k828JavaScriptNOASSERTION

·Website

cross-site-scriptingdomdompurifyhtmljavascriptmathml+5

Last updated 2 days ago

Back to changelog

NewSeptember 17, 2025

DOMPurify 3.2.7

Added new attributes and elements to default allow-list, thanks @elrion018
Added tagName parameter to custom element attributeNameCheck, thanks @nelstrom
Added better check for animated href attributes, thanks @llamakko
Updated and improved the bundled types, thanks @ssi02014
Updated several tests to better align with new browser encoding behaviors
Improved the handling of potentially risky content inside CDATA elements, thanks @securityMB & @terjanq
Improved the regular expression for raw-text elements to cover textareas, thanks @securityMB & @terjanq

More JavaScript Projects

react

The library for web and native user interfaces.

244.3k

JavaScript

next.js

The React Framework

138.6k

JavaScript

everything-claude-code

Complete Claude Code configuration collection - agents, skills, hooks, commands, rules, MCPs. Battle-tested configs from an Anthropic hackathon winner.

132.8k

JavaScript

30-seconds-of-code

Coding articles to level up your development skills

127.3k

JavaScript

View all JavaScript projects →