# v2 git bundle eefe08b078d1359b1fb7337b26da42668066528c refs/heads/bundle eefe08b078d1359b1fb7337b26da42668066528c HEAD PACK3›xD}tree ae22e7d8eaa7bd667cba0ba5985555e48156534c parent 9ee03a7eb9e6be241579bc3c517a18a7b99b0bf1 author Cure53 1777551995 +0300 committer GitHub 1777551995 +0200 Sync/3.4.2 (#1322) * build(deps): bump @tootallnate/once and jsdom (#1214) Removes [@tootallnate/once](https://github.com/TooTallNate/once). It's no longer used after updating ancestor dependency [jsdom](https://github.com/jsdom/jsdom). These dependencies need to be updated together. Removes `@tootallnate/once` Updates `jsdom` from 20.0.3 to 28.1.0 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md) - [Commits](https://github.com/jsdom/jsdom/compare/20.0.3...28.1.0) --- updated-dependencies: - dependency-name: "@tootallnate/once" dependency-version: dependency-type: indirect - dependency-name: jsdom dependency-version: 28.1.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump serialize-javascript and @rollup/plugin-terser (#1213) Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.4 and updates ancestor dependency [@rollup/plugin-terser](https://github.com/rollup/plugins/tree/HEAD/packages/terser). These dependencies need to be updated together. Updates `serialize-javascript` from 6.0.2 to 7.0.4 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](https://github.com/yahoo/serialize-javascript/compare/v6.0.2...v7.0.4) Updates `@rollup/plugin-terser` from 0.4.4 to 1.0.0 - [Changelog](https://github.com/rollup/plugins/blob/master/packages/terser/CHANGELOG.md) - [Commits](https://github.com/rollup/plugins/commits/beep-v1.0.0/packages/terser) --- updated-dependencies: - dependency-name: serialize-javascript dependency-version: 7.0.4 dependency-type: indirect - dependency-name: "@rollup/plugin-terser" dependency-version: 1.0.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: Fixed a problem with the type defition patcher after Node version bump * build(deps-dev): bump undici from 7.23.0 to 7.24.1 (#1216) Bumps [undici](https://github.com/nodejs/undici) from 7.23.0 to 7.24.1. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v7.23.0...v7.24.1) --- updated-dependencies: - dependency-name: undici dependency-version: 7.24.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump flatted from 3.4.1 to 3.4.2 (#1218) Bumps [flatted](https://github.com/WebReflection/flatted) from 3.4.1 to 3.4.2. - [Commits](https://github.com/WebReflection/flatted/compare/v3.4.1...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * test: Added more browser launchers to stay up-to-date * test: Testing whether the Browser Stack "latest" labels work * test: Expanded range of tested Node versions into both directions * fix: Removed Node 26 test target again, not available yet * fix: Removed Node 16 test target as it breaks * Update README.md (#1222) * build(deps-dev): bump serialize-javascript from 7.0.4 to 7.0.5 (#1223) Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) from 7.0.4 to 7.0.5. - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](https://github.com/yahoo/serialize-javascript/compare/v7.0.4...v7.0.5) --- updated-dependencies: - dependency-name: serialize-javascript dependency-version: 7.0.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump lodash from 4.17.23 to 4.18.1 (#1228) Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 (#1225) Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash-es dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Create scorecard.yml * fix: FORBID_TAGS must win over ADD_TAGS function predicate (#1230) Mirrors the FORBID_ATTR early-exit pattern (e0d3ddf, line 1214) for FORBID_TAGS. When EXTRA_ELEMENT_HANDLING.tagCheck is a function that returns true, the short-circuit evaluation previously skipped the FORBID_TAGS check, allowing forbidden elements through. Moves FORBID_TAGS[tagName] to an OR at the top of the condition so the removal block is always entered for forbidden tags regardless of the tagCheck predicate result. * Update build-and-test.yml * [StepSecurity] Apply security best practices (#1231) Signed-off-by: StepSecurity Bot * build(deps-dev): bump jsdom from 28.1.0 to 29.0.2 (#1240) Bumps [jsdom](https://github.com/jsdom/jsdom) from 28.1.0 to 29.0.2. - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](https://github.com/jsdom/jsdom/compare/v28.1.0...v29.0.2) --- updated-dependencies: - dependency-name: jsdom dependency-version: 29.0.2 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump rollup-plugin-dts from 6.4.0 to 6.4.1 (#1239) Bumps [rollup-plugin-dts](https://github.com/Swatinem/rollup-plugin-dts) from 6.4.0 to 6.4.1. - [Changelog](https://github.com/Swatinem/rollup-plugin-dts/blob/master/CHANGELOG.md) - [Commits](https://github.com/Swatinem/rollup-plugin-dts/compare/v6.4.0...v6.4.1) --- updated-dependencies: - dependency-name: rollup-plugin-dts dependency-version: 6.4.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump cross-env from 7.0.3 to 10.1.0 (#1238) Bumps [cross-env](https://github.com/kentcdodds/cross-env) from 7.0.3 to 10.1.0. - [Release notes](https://github.com/kentcdodds/cross-env/releases) - [Changelog](https://github.com/kentcdodds/cross-env/blob/main/CHANGELOG.md) - [Commits](https://github.com/kentcdodds/cross-env/compare/v7.0.3...v10.1.0) --- updated-dependencies: - dependency-name: cross-env dependency-version: 10.1.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump actions/upload-artifact from 4.6.1 to 7.0.1 (#1237) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.1 to 7.0.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump @rollup/plugin-node-resolve from 15.3.1 to 16.0.3 (#1236) Bumps [@rollup/plugin-node-resolve](https://github.com/rollup/plugins/tree/HEAD/packages/node-resolve) from 15.3.1 to 16.0.3. - [Changelog](https://github.com/rollup/plugins/blob/master/packages/node-resolve/CHANGELOG.md) - [Commits](https://github.com/rollup/plugins/commits/node-resolve-v16.0.3/packages/node-resolve) --- updated-dependencies: - dependency-name: "@rollup/plugin-node-resolve" dependency-version: 16.0.3 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.3 (#1235) Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.1 to 2.4.3. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/f49aabe0b5af0936a0987cfb85d86b75731b0186...4eaacf0543bb3f2c246792bd56e8cdeffafb205a) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump actions/checkout from 4.2.2 to 6.0.2 (#1234) Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 6.0.2. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4.2.2...de0fac2e4500dabe0009e67214ff5f5447ce83dd) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump @babel/preset-env from 7.29.0 to 7.29.2 (#1233) Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.29.0 to 7.29.2. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.2/packages/babel-preset-env) --- updated-dependencies: - dependency-name: "@babel/preset-env" dependency-version: 7.29.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github/codeql-action from 3.35.1 to 4.35.1 (#1232) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.35.1 to 4.35.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3.35.1...c10b8064de6f491fea524254123dbe5e09572f13) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Added CONTRIBUTIONS.md * chore: Regenerated dist versions * fix: added osv-scanner.toml to ignore flagged deps * chore: update build-and-test.yml to get rid of a warning * docs: update README.md with OSF results * docs: update build-and-test.yml name * docs: update README.md badges * test: removed nine really old browsers from karma tests * fix: apply SAFE_FOR_TEMPLATES scrub in RETURN_DOM path (#1241) The RETURN_DOM path returns before the final template expression scrub, allowing split mustache expressions to reconstruct after element removal. Normalize adjacent text nodes and scrub body before building the return node. Co-authored-by: Developer * fix: prevent ADD_ATTR/ADD_TAGS function leaking into subsequent array-based calls (#1242) When sanitize() is called with ADD_ATTR or ADD_TAGS as a function, the function reference is stored in EXTRA_ELEMENT_HANDLING. A subsequent call that passes ADD_ATTR/ADD_TAGS as an array did not clear the stored function because objectHasOwnProperty(cfg, 'ADD_ATTR') returned true, skipping the conditional reset. The leaked function is evaluated before URI/tag checks, so a permissive function (returning true) lets dangerous attributes (e.g. javascript: URIs) or forbidden tags (e.g. iframe) through on later calls. Fix: unconditionally reset tagCheck/attributeCheck to null on every _parseConfig() call, then only set them if the current config provides a function. This ensures no cross-call leakage. Includes regression tests for both ADD_ATTR and ADD_TAGS leakage scenarios. * test: reduced number of tested browsers again to be at 24 * Fix mathML attributes (#1243) * test: reducing BS browser array once more to get unstuck * test: temporarily reduced browser test array to four main items :-( * build(deps-dev): bump eslint-config-prettier from 8.10.2 to 10.1.8 (#1244) Bumps [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) from 8.10.2 to 10.1.8. - [Release notes](https://github.com/prettier/eslint-config-prettier/releases) - [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/eslint-config-prettier/commits/v10.1.8) --- updated-dependencies: - dependency-name: eslint-config-prettier dependency-version: 10.1.8 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump rollup from 3.30.0 to 4.60.1 (#1246) Bumps [rollup](https://github.com/rollup/rollup) from 3.30.0 to 4.60.1. - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](https://github.com/rollup/rollup/compare/v3.30.0...v4.60.1) --- updated-dependencies: - dependency-name: rollup dependency-version: 4.60.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump follow-redirects from 1.15.11 to 1.16.0 (#1249) Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.11 to 1.16.0. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.11...v1.16.0) --- updated-dependencies: - dependency-name: follow-redirects dependency-version: 1.16.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * test: carefully expanded array of tested BS browsers again * test: experimenting with new BS config to avoid the freezes test: removed two Safari versions as they might be the cause docs: updated version numbers for upcoming release * test: reverted to old BS config values as they worked better * Update LICENSE (#1254) * test: added three more browsers to test array (OSX, mobile) * Update karma.custom-launchers.config.js (#1256) * docs: updated list of contributors and fixed some outdated docs (#1257) * Update README.md (#1258) * test: added first scaffold for a simple data type and config fuzzer * test: added first scaffold for a simple data type and config fuzzer (#1259) * build(deps-dev): bump @rollup/plugin-babel from 6.1.0 to 7.0.0 (#1264) Bumps [@rollup/plugin-babel](https://github.com/rollup/plugins/tree/HEAD/packages/babel) from 6.1.0 to 7.0.0. - [Changelog](https://github.com/rollup/plugins/blob/master/packages/babel/CHANGELOG.md) - [Commits](https://github.com/rollup/plugins/commits/url-v7.0.0/packages/babel) --- updated-dependencies: - dependency-name: "@rollup/plugin-babel" dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump @types/node from 16.18.126 to 25.6.0 (#1262) Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.18.126 to 25.6.0. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 25.6.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Cure53 * build(deps-dev): bump rollup-plugin-typescript2 from 0.36.0 to 0.37.0 (#1263) Bumps [rollup-plugin-typescript2](https://github.com/ezolenko/rollup-plugin-typescript2) from 0.36.0 to 0.37.0. - [Release notes](https://github.com/ezolenko/rollup-plugin-typescript2/releases) - [Changelog](https://github.com/ezolenko/rollup-plugin-typescript2/blob/master/CHANGELOG.md) - [Commits](https://github.com/ezolenko/rollup-plugin-typescript2/compare/0.36.0...0.37.0) --- updated-dependencies: - dependency-name: rollup-plugin-typescript2 dependency-version: 0.37.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Cure53 * test: Extended the fuzzer a bit to cover the config object * Cure53 basic fuzzer (#1265) * test: added first scaffold for a simple data type and config fuzzer * test: Extended the fuzzer a bit to cover the config object * test: expanded fuzzer test coverage for bad config values fix: fixed several crashes caused by bad config values and data types fix: added necessary utility messages to utils.js * Cure53 basic fuzzer (#1266) * test: added first scaffold for a simple data type and config fuzzer * test: Extended the fuzzer a bit to cover the config object * test: expanded fuzzer test coverage for bad config values fix: fixed several crashes caused by bad config values and data types fix: added necessary utility messages to utils.js * fix: made the NAMESAPCE config handling less crashy * fix: added better config hardening and removed crash potentials test: expanded test suite to cover above changes * Update README.md Added new badge, added `npm run test:fuzz` info * chore(deps): bump rimraf, prettier, eslint-plugin-prettier, minimist * style: reformat codebase with Prettier 3 * chore(test): migrate from Karma to Playwright for browser tests Karma has been deprecated since April 2023 and has been blocking Dependabot updates across the dev-dependency tree. This migration replaces it with Playwright while preserving all existing test logic. Changes: - Replace Karma + karma-* plugin ecosystem with @playwright/test - Add tiny zero-dep static file server for the Playwright webServer - Add HTML runner pages for dist/purify.js and dist/purify.min.js that load QUnit, jQuery, DOMPurify, test-suite.js, and an ES module entry - Add Playwright spec that drives each runner, waits for QUnit.done, and surfaces per-assertion failure detail on error - Drop rollup-plugin-includepaths (was only aliasing 'purify' for Karma) - Drop minimist (was only used by the old custom-launchers config) - Update build-and-test.yml to install Playwright browsers and upload playwright-report/ artifact on failure Unchanged: - test/test-suite.js (2398 lines of QUnit assertions) - test/bootstrap-test-suite.js - test/fixtures/expect.mjs - test/config/setup.js - test/jsdom-node-runner.js, test/jsdom-node.js - test/fuzz/** - rollup.config.js, src/**, scripts/** Browser coverage: chromium, firefox, and webkit run locally and on non-BrowserStack CI (3 rendering engines: Blink, Gecko, WebKit). The 28-browser BrowserStack matrix is temporarily disabled and will be restored in a follow-up PR via browserstack-node-sdk. Test counts verified identical pre/post migration: 911 QUnit tests × 2 suites, all passing. * fix(test): harden test/browser/server.js against path traversal and reflected XSS * ci(test): add cross-OS browser matrix (ubuntu + macOS + windows) * fix: added pinning hash for dependency * Update README.md Updated browser test coverage info * build: migrate rollup-plugin-typescript2 and pre-commit Switch rollup-plugin-typescript2 → @rollup/plugin-typescript (official, actively maintained by the Rollup team). Type declaration pipeline is unaffected — types are generated by tsc directly, not the rollup plugin. Switch pre-commit → husky (modern standard, zero runtime deps, actively maintained). Hook behavior is identical: lint + build + stage dist files. The prepare script ensures hooks install automatically on npm install. * chore: cleaned up two ignored issues from OSV TOML file * chore: removed some unneeded files build: made sure npx is properly pinned and not flagged by scorecard * chore: removed some unneeded files (#1279) build: made sure npx is properly pinned and not flagged by scorecard Co-authored-by: Mario Heiderich * Create CODEOWNERS (#1280) * Update build-and-test.yml (#1282) * build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#1288) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/c10b8064de6f491fea524254123dbe5e09572f13...95e58e9a2cdfd71adc6e0353d5c52f41a045d225) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 (#1286) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 7.0.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4.6.2...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Cure53 * build(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0 (#1285) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.17.0 to 2.18.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/f808768d1510423e83855289c910610ca9b43176...6c3c2f2c1c457b00c10c4848d6f5491db3b629df) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.18.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Cure53 * build(deps-dev): bump fast-check from 4.6.0 to 4.7.0 (#1287) Bumps [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) from 4.6.0 to 4.7.0. - [Release notes](https://github.com/dubzzz/fast-check/releases) - [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md) - [Commits](https://github.com/dubzzz/fast-check/commits/v4.7.0/packages/fast-check) --- updated-dependencies: - dependency-name: fast-check dependency-version: 4.7.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Cure53 * Update purify.ts (#1290) chore: removed some risky dead code, thanks @1Jesper1 * Update config.ts (#1291) chore: fixed a typo, thanks @1Jesper1 * Update README.md (#1292) * build(deps-dev): bump rollup from 4.60.1 to 4.60.2 (#1294) Bumps [rollup](https://github.com/rollup/rollup) from 4.60.1 to 4.60.2. - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](https://github.com/rollup/rollup/compare/v4.60.1...v4.60.2) --- updated-dependencies: - dependency-name: rollup dependency-version: 4.60.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Update attrs.ts (#1295) fix: removed a duplicate entry * Cure53 code hardening (#1296) * chore: added stronger check for HTML Custom Element tagnames cxhore: added stronger check for IN_PLACE tagname types * test: add regression and pinning tests from April 2026 review * test: added more fuzzer properties and a negative check (#1297) * Cure53 fuzzer update (#1298) * test: added more fuzzer properties and a negative check * chore: getting ready for 3.4.1 release * Create sign-release.yml (#1303) * Create sign-release.yml * Create slsa-provenance.yml * Update scorecard.yml (#1304) * Update scorecard.yml * Update sign-release.yml * Update slsa-provenance.yml * Update sign-release.yml * Update slsa-provenance.yml (#1305) * Update slsa-provenance.yml * Update sign-release.yml * Update slsa-provenance.yml * Update scorecard.yml (#1306) * Update scorecard.yml (#1307) * chore: added new workflow files for a first test (#1308) * chore: added new workflow files for a first test * chore: adjusted the build-and-test workflow slightly * chore: added a build-and-test-skip workflow to save on time and CPU * Cure53 expanding tests (#1310) * test: expanded test coverage for form clobbering and type confusions * test: removed some outdated comments in test suite * Update build-and-test.yml (#1311) * build(deps): bump actions/attest-build-provenance from 2.2.3 to 4.1.0 (#1315) Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 2.2.3 to 4.1.0. - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/c074443f1aee8d4aeeae555aebba3282517141b2...a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#1314) Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0 (#1312) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.2.0 to 3.3.0. - [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases) - [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/gh-action-sigstore-python/compare/a5caf349bc536fbef3668a10ed7f5cd309a4b53d...04cffa1d795717b140764e8b640de88853c92acc) --- updated-dependencies: - dependency-name: sigstore/gh-action-sigstore-python dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 (#1313) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.18.0 to 2.19.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/6c3c2f2c1c457b00c10c4848d6f5491db3b629df...8d3c67de8e2fe68ef647c8db1e6a09f647780f40) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.19.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Update package.json (#1317) fix #1316 * build(deps-dev): bump jsdom from 29.0.2 to 29.1.0 (#1318) Bumps [jsdom](https://github.com/jsdom/jsdom) from 29.0.2 to 29.1.0. - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](https://github.com/jsdom/jsdom/compare/v29.0.2...v29.1.0) --- updated-dependencies: - dependency-name: jsdom dependency-version: 29.1.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: apply URI validation to attributes allowed via ADD_ATTR callback (#1320) * fix: apply URI validation to attributes allowed via ADD_ATTR callback The function form of ADD_ATTR (introduced in PR #1150) allowed attribute names to bypass URI scheme validation. When the attributeCheck callback returned true, the attribute value was accepted without checking it against IS_ALLOWED_URI, meaning javascript: and data: URIs could pass through unsanitized. The array form of ADD_ATTR and the default ALLOWED_ATTR set both flow through URI validation correctly; the function form now does too. The fix removes the attributeCheck branch as a separate early-exit and folds it into the name-permitted test that precedes value validation: const nameIsPermitted = ALLOWED_ATTR[lcName] || (EXTRA_ELEMENT_HANDLING.attributeCheck instanceof Function && EXTRA_ELEMENT_HANDLING.attributeCheck(lcName, lcTag)); } else if (!nameIsPermitted || FORBID_ATTR[lcName]) { Tests added: javascript: URI is stripped when href is allowed via ADD_ATTR callback; safe https: URI is preserved. * test: use assert.equal to avoid CodeQL substring URL warning * release: 3.4.2 (#1321) --------- Signed-off-by: dependabot[bot] Signed-off-by: StepSecurity Bot Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: kodareef5 Co-authored-by: StepSecurity Bot Co-authored-by: bencalif Co-authored-by: Developer Co-authored-by: 1Jesper1 <1jesper1@gmail.com> Co-authored-by: David Oliver Co-authored-by: Mario Heiderich Co-authored-by: Drew Neil Co-authored-by: Hanzo Dev džxTtree ca0ab2cac8891497960c607588eaa9acc4f34125 parent d0758615cb46ec400213cb32b788c1d91c808f68 author Cure53 1776788949 +0300 committer GitHub 1776788949 +0200 chore: merge main into 3.x for 3.4.1 release (#1301) * chore: merge main into 3.x for 3.4.1 release * ci: run CodeQL on 2.x and 3.x branches&d֒xtree e1ae327a20038f03add37c941b09f54c77a38d5b parent 6290e4560b92e5383e22270295d8fcf9f7b708ee author Mario Heiderich 1776168117 +0200 committer Mario Heiderich 1776168117 +0200 test: added three more browsers to test setup (OSX, mobile) 1776149685 +0300 committer GitHub 1776149685 +0200 Getting 3.x branch ready for 3.4.0 release (#1250) * build(deps): bump @tootallnate/once and jsdom (#1214) Removes [@tootallnate/once](https://github.com/TooTallNate/once). It's no longer used after updating ancestor dependency [jsdom](https://github.com/jsdom/jsdom). These dependencies need to be updated together. Removes `@tootallnate/once` Updates `jsdom` from 20.0.3 to 28.1.0 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md) - [Commits](https://github.com/jsdom/jsdom/compare/20.0.3...28.1.0) --- updated-dependencies: - dependency-name: "@tootallnate/once" dependency-version: dependency-type: indirect - dependency-name: jsdom dependency-version: 28.1.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump serialize-javascript and @rollup/plugin-terser (#1213) Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.4 and updates ancestor dependency [@rollup/plugin-terser](https://github.com/rollup/plugins/tree/HEAD/packages/terser). These dependencies need to be updated together. Updates `serialize-javascript` from 6.0.2 to 7.0.4 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](https://github.com/yahoo/serialize-javascript/compare/v6.0.2...v7.0.4) Updates `@rollup/plugin-terser` from 0.4.4 to 1.0.0 - [Changelog](https://github.com/rollup/plugins/blob/master/packages/terser/CHANGELOG.md) - [Commits](https://github.com/rollup/plugins/commits/beep-v1.0.0/packages/terser) --- updated-dependencies: - dependency-name: serialize-javascript dependency-version: 7.0.4 dependency-type: indirect - dependency-name: "@rollup/plugin-terser" dependency-version: 1.0.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: Fixed a problem with the type defition patcher after Node version bump * build(deps-dev): bump undici from 7.23.0 to 7.24.1 (#1216) Bumps [undici](https://github.com/nodejs/undici) from 7.23.0 to 7.24.1. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v7.23.0...v7.24.1) --- updated-dependencies: - dependency-name: undici dependency-version: 7.24.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump flatted from 3.4.1 to 3.4.2 (#1218) Bumps [flatted](https://github.com/WebReflection/flatted) from 3.4.1 to 3.4.2. - [Commits](https://github.com/WebReflection/flatted/compare/v3.4.1...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * test: Added more browser launchers to stay up-to-date * test: Testing whether the Browser Stack "latest" labels work * test: Expanded range of tested Node versions into both directions * fix: Removed Node 26 test target again, not available yet * fix: Removed Node 16 test target as it breaks * Update README.md (#1222) * build(deps-dev): bump serialize-javascript from 7.0.4 to 7.0.5 (#1223) Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) from 7.0.4 to 7.0.5. - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](https://github.com/yahoo/serialize-javascript/compare/v7.0.4...v7.0.5) --- updated-dependencies: - dependency-name: serialize-javascript dependency-version: 7.0.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump lodash from 4.17.23 to 4.18.1 (#1228) Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 (#1225) Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash-es dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Create scorecard.yml * fix: FORBID_TAGS must win over ADD_TAGS function predicate (#1230) Mirrors the FORBID_ATTR early-exit pattern (e0d3ddf, line 1214) for FORBID_TAGS. When EXTRA_ELEMENT_HANDLING.tagCheck is a function that returns true, the short-circuit evaluation previously skipped the FORBID_TAGS check, allowing forbidden elements through. Moves FORBID_TAGS[tagName] to an OR at the top of the condition so the removal block is always entered for forbidden tags regardless of the tagCheck predicate result. * Update build-and-test.yml * [StepSecurity] Apply security best practices (#1231) Signed-off-by: StepSecurity Bot * build(deps-dev): bump jsdom from 28.1.0 to 29.0.2 (#1240) Bumps [jsdom](https://github.com/jsdom/jsdom) from 28.1.0 to 29.0.2. - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](https://github.com/jsdom/jsdom/compare/v28.1.0...v29.0.2) --- updated-dependencies: - dependency-name: jsdom dependency-version: 29.0.2 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump rollup-plugin-dts from 6.4.0 to 6.4.1 (#1239) Bumps [rollup-plugin-dts](https://github.com/Swatinem/rollup-plugin-dts) from 6.4.0 to 6.4.1. - [Changelog](https://github.com/Swatinem/rollup-plugin-dts/blob/master/CHANGELOG.md) - [Commits](https://github.com/Swatinem/rollup-plugin-dts/compare/v6.4.0...v6.4.1) --- updated-dependencies: - dependency-name: rollup-plugin-dts dependency-version: 6.4.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump cross-env from 7.0.3 to 10.1.0 (#1238) Bumps [cross-env](https://github.com/kentcdodds/cross-env) from 7.0.3 to 10.1.0. - [Release notes](https://github.com/kentcdodds/cross-env/releases) - [Changelog](https://github.com/kentcdodds/cross-env/blob/main/CHANGELOG.md) - [Commits](https://github.com/kentcdodds/cross-env/compare/v7.0.3...v10.1.0) --- updated-dependencies: - dependency-name: cross-env dependency-version: 10.1.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump actions/upload-artifact from 4.6.1 to 7.0.1 (#1237) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.1 to 7.0.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump @rollup/plugin-node-resolve from 15.3.1 to 16.0.3 (#1236) Bumps [@rollup/plugin-node-resolve](https://github.com/rollup/plugins/tree/HEAD/packages/node-resolve) from 15.3.1 to 16.0.3. - [Changelog](https://github.com/rollup/plugins/blob/master/packages/node-resolve/CHANGELOG.md) - [Commits](https://github.com/rollup/plugins/commits/node-resolve-v16.0.3/packages/node-resolve) --- updated-dependencies: - dependency-name: "@rollup/plugin-node-resolve" dependency-version: 16.0.3 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.3 (#1235) Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.1 to 2.4.3. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/f49aabe0b5af0936a0987cfb85d86b75731b0186...4eaacf0543bb3f2c246792bd56e8cdeffafb205a) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump actions/checkout from 4.2.2 to 6.0.2 (#1234) Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 6.0.2. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4.2.2...de0fac2e4500dabe0009e67214ff5f5447ce83dd) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump @babel/preset-env from 7.29.0 to 7.29.2 (#1233) Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.29.0 to 7.29.2. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.2/packages/babel-preset-env) --- updated-dependencies: - dependency-name: "@babel/preset-env" dependency-version: 7.29.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump github/codeql-action from 3.35.1 to 4.35.1 (#1232) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.35.1 to 4.35.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3.35.1...c10b8064de6f491fea524254123dbe5e09572f13) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Added CONTRIBUTIONS.md * chore: Regenerated dist versions * fix: added osv-scanner.toml to ignore flagged deps * chore: update build-and-test.yml to get rid of a warning * docs: update README.md with OSF results * docs: update build-and-test.yml name * docs: update README.md badges * test: removed nine really old browsers from karma tests * fix: apply SAFE_FOR_TEMPLATES scrub in RETURN_DOM path (#1241) The RETURN_DOM path returns before the final template expression scrub, allowing split mustache expressions to reconstruct after element removal. Normalize adjacent text nodes and scrub body before building the return node. Co-authored-by: Developer * fix: prevent ADD_ATTR/ADD_TAGS function leaking into subsequent array-based calls (#1242) When sanitize() is called with ADD_ATTR or ADD_TAGS as a function, the function reference is stored in EXTRA_ELEMENT_HANDLING. A subsequent call that passes ADD_ATTR/ADD_TAGS as an array did not clear the stored function because objectHasOwnProperty(cfg, 'ADD_ATTR') returned true, skipping the conditional reset. The leaked function is evaluated before URI/tag checks, so a permissive function (returning true) lets dangerous attributes (e.g. javascript: URIs) or forbidden tags (e.g. iframe) through on later calls. Fix: unconditionally reset tagCheck/attributeCheck to null on every _parseConfig() call, then only set them if the current config provides a function. This ensures no cross-call leakage. Includes regression tests for both ADD_ATTR and ADD_TAGS leakage scenarios. * test: reduced number of tested browsers again to be at 24 * Fix mathML attributes (#1243) * test: reducing BS browser array once more to get unstuck * test: temporarily reduced browser test array to four main items :-( * build(deps-dev): bump eslint-config-prettier from 8.10.2 to 10.1.8 (#1244) Bumps [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) from 8.10.2 to 10.1.8. - [Release notes](https://github.com/prettier/eslint-config-prettier/releases) - [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/eslint-config-prettier/commits/v10.1.8) --- updated-dependencies: - dependency-name: eslint-config-prettier dependency-version: 10.1.8 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps-dev): bump rollup from 3.30.0 to 4.60.1 (#1246) Bumps [rollup](https://github.com/rollup/rollup) from 3.30.0 to 4.60.1. - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](https://github.com/rollup/rollup/compare/v3.30.0...v4.60.1) --- updated-dependencies: - dependency-name: rollup dependency-version: 4.60.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump follow-redirects from 1.15.11 to 1.16.0 (#1249) Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.11 to 1.16.0. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.11...v1.16.0) --- updated-dependencies: - dependency-name: follow-redirects dependency-version: 1.16.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * test: carefully expanded array of tested BS browsers again * test: experimenting with new BS config to avoid the freezes test: removed two Safari versions as they might be the cause docs: updated version numbers for upcoming release * test: reverted to old BS config values as they worked better --------- Signed-off-by: dependabot[bot] Signed-off-by: StepSecurity Bot Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: kodareef5 Co-authored-by: StepSecurity Bot Co-authored-by: bencalif Co-authored-by: Developer Co-authored-by: 1Jesper1 <1jesper1@gmail.com> Co-authored-by: David Oliver Co-authored-by: Hanzo Dev dlx tree b6ed77e1efc57769c7a17b375ffd6f5dd187cbc9 parent b82050e88af888e7b38a89e623c8a73ff3982c82 author Mario Heiderich 1773215700 +0100 committer Mario Heiderich 1773215700 +0100 chore: Preparing 3.3.3 release DI#x6tree f2d5ec19a53fb8f5768a3669a4f2beb6d9e0b91c parent 1a266608752f4a9772a1a366c9542a60b65ef773 author Rotzbua 1773039650 +0100 committer GitHub 1773039650 +0100 fix: engine requirement (#1210) The package is used to distribute finished builds that do not have any direct requirements for the node version used. However, a modern nodejs environment is required for the build process. A different configuration is provided for this purpose: https://docs.npmjs.com/cli/v11/configuring-npm/package-json#devengines x(tree f16847bf57c31197acdb6f0d6981dbff581dc9b8 parent 5de2fda9e66ab80e1719458e466544790b2c13b4 author Cure53 1772717020 +0100 committer GitHub 1772717020 +0100 Update README.md~>x9tree a41729d862032c7190c835717c6a73a0062c6a84 parent 5ff3fd1c051cff82d0278c8b2c83025afc59cb24 parent 0ee71133bd56565ae9042f190621e37fcd43b9ce author Mario Heiderich 1772697956 +0100 committer Mario Heiderich 1772698000 +0100 Merge branch 'main' of github.com:cure53/DOMPurify ]8]xtree d5f2947a041272d2ad29a57e200fc741cac4826f parent 83a7b8b47cfdc26a0d8e36bc17bb49272c9ba715 author Mario Heiderich 1772697475 +0100 committer Mario Heiderich 1772697640 +0100 fix: moved back from jsdom 28 to jsdom 20 RaLxtree d5f2947a041272d2ad29a57e200fc741cac4826f parent 83a7b8b47cfdc26a0d8e36bc17bb49272c9ba715 author Mario Heiderich 1772697475 +0100 committer Mario Heiderich 1772697475 +0100 fix: moved back from jsdom 28 to jsdom 20 SLx tree d5459392131da4c28742e8473c8230a2059343c8 parent 6cc23629e14629a93dc58a42c1e1a65e4a27bf34 author Mario Heiderich 1772696866 +0100 committer Mario Heiderich 1772696866 +0100 chore: Preparing 3.3.2 release GGFxatree ec37b1b1fbb43839d84f1b252018c1ed024eab1d parent 2a53a59fbbf2150cc8b835fd497c385cad9ab1e2 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1772695180 +0100 committer GitHub 1772695180 +0100 build(deps): bump @tootallnate/once and jsdom (#1204) Removes [@tootallnate/once](https://github.com/TooTallNate/once). It's no longer used after updating ancestor dependency [jsdom](https://github.com/jsdom/jsdom). These dependencies need to be updated together. Removes `@tootallnate/once` Updates `jsdom` from 20.0.0 to 28.1.0 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md) - [Commits](https://github.com/jsdom/jsdom/compare/20.0.0...28.1.0) --- updated-dependencies: - dependency-name: "@tootallnate/once" dependency-version: dependency-type: indirect - dependency-name: jsdom dependency-version: 28.1.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>}xtree 81b45c8cd627b75f4d30cb2a9cfef9b187c32c20 parent aae137bb5e152a4dc9be91747562f1fc9c04debe author Mario Heiderich 1772553539 +0100 committer Mario Heiderich 1772553539 +0100 fix: Expanded the regex ever so slightly to also cover script Vx9tree 9f9a82efc6d00f2f9be19a556d2a05c95d237fc4 parent 5eb95add6122d5d361e6bd6f89a39bafd0a1e1b9 parent 7d946bb9173b96926ff41bcc9c32eb65351b7667 author Mario Heiderich 1772545430 +0100 committer Mario Heiderich 1772545430 +0100 Merge branch 'main' of github.com:cure53/DOMPurify r^ܚxtree 6fa057c83fb61ad8ab57f20a3ccfd7500fef4c26 parent e0d3ddf76f9666b06208fa868ca2d059ea6be145 author Mario Heiderich 1772542721 +0100 committer Mario Heiderich 1772545409 +0100 fix: Adding a slightly tighter regex because of possible jsdom woes X4xItree 9f9a82efc6d00f2f9be19a556d2a05c95d237fc4 parent 2d8623e276d4a15b8b11e70deb3944243860cb4e author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1772545283 +0100 committer GitHub 1772545283 +0100 build(deps-dev): bump rollup from 3.29.5 to 3.30.0 (#1199) Bumps [rollup](https://github.com/rollup/rollup) from 3.29.5 to 3.30.0. - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/v3.30.0/CHANGELOG.md) - [Commits](https://github.com/rollup/rollup/compare/v3.29.5...v3.30.0) --- updated-dependencies: - dependency-name: rollup dependency-version: 3.30.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>0x tree e108e49c8fef82eb58e68af9c5559d9b0e0c4514 parent 3aa2fcfb6eaf4c65031256c7e13f820180ffe742 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1772545272 +0100 committer GitHub 1772545272 +0100 build(deps-dev): bump minimatch from 3.1.2 to 3.1.5 (#1200) Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.2 to 3.1.5. - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5) --- updated-dependencies: - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Ezxtree 6fa057c83fb61ad8ab57f20a3ccfd7500fef4c26 parent e0d3ddf76f9666b06208fa868ca2d059ea6be145 author Mario Heiderich 1772542721 +0100 committer Mario Heiderich 1772542721 +0100 fix: Adding a slighjtly tighter regex because of possible jsdom woes $Yxtree d42480ceda5eb6e1c723af972c43ef09c8518b27 parent dc018f8bf35aa7ea4d3ad3e55c1a5701ba65267a author Mario Heiderich 1771937729 +0100 committer Mario Heiderich 1771937729 +0100 fix: Added smaller fixes addressing several LLM bug reports UX.xtree d9905dfbdbb3635df00defacbf37d857d33368b6 parent bbc3dfe1d0d5e1f83fabc078bcdec021966975b7 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1770976103 +0100 committer GitHub 1770976103 +0100 build(deps): bump qs from 6.14.1 to 6.14.2 (#1196) Bumps [qs](https://github.com/ljharb/qs) from 6.14.1 to 6.14.2. - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](https://github.com/ljharb/qs/compare/v6.14.1...v6.14.2) --- updated-dependencies: - dependency-name: qs dependency-version: 6.14.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> x(tree e460045b29b848e9580fb640dbd8f4a5cfe11e2c parent 113feb6a49b8965352b8f25346dab98b107dccff author Cure53 1770972388 +0100 committer GitHub 1770972388 +0100 Update README.md?_ x(tree 2720ee6c965dbe296e94ee5b54ebbf9884df5d17 parent 29040ab495c3421b4a93a306cf6998dc46070143 author Cure53 1770972367 +0100 committer GitHub 1770972367 +0100 Update README.mdVz>s4xKtree 999456ca5a9feaffff66bd95f851291274ce4ee5 parent 8b1a2604f541e5d04344ab441244017b05118122 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1770972218 +0100 committer GitHub 1770972218 +0100 build(deps-dev): bump webpack from 5.94.0 to 5.105.0 (#1194) Bumps [webpack](https://github.com/webpack/webpack) from 5.94.0 to 5.105.0. - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack/compare/v5.94.0...v5.105.0) --- updated-dependencies: - dependency-name: webpack dependency-version: 5.105.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>xtree 506e98c6461e4310fd87b50916f63d5ebb06c238 parent 9442e1b34b4d35c43c67702d227e51a22903bcc7 author Cure53 1770972202 +0100 committer GitHub 1770972202 +0100 Update README.md (#1195) +}?%/x tree bd28c9cc2ab7144f78c4e91169d3279423cb423e parent 6a63c99e076d587fb4cafcab435556d396adc19c author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1769077589 +0100 committer GitHub 1769077589 +0100 build(deps): bump lodash from 4.17.21 to 4.17.23 (#1193) Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>}0xtree 5e2cbbb5f142c9c992d2b41b223ff08259d8aac1 parent 7ca837fba51cb2a16d82abb1b79e1f59d8669489 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1769077555 +0100 committer GitHub 1769077555 +0100 build(deps-dev): bump lodash-es from 4.17.21 to 4.17.23 (#1192) Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash-es dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> ғxtree d8f747a652df279dcb555da02f488ecd087b09fa parent 9c1b33c1fee7c137c004065a66fc81ec2b43b01a author Rotzbua 1769077491 +0100 committer GitHub 1769077491 +0100 remove dependency `lodash.sample` (#1191) use native code:V|x tree a5369ae06fc3449fcc6f7032bb0fca198bb9f595 parent 1b6efaccf2a277c0369506e69fd00a855242165f author Rotzbua 1769077472 +0100 committer GitHub 1769077472 +0100 remove abandoned dependency `npm-run-all` (#1190) S>x tree ba3aabf15735d1ec9ca1c25c2418a88d0ff6546f parent 2aeabf496b9650975dd6a022aa8dfd90252aaa1c author Rotzbua 1768299166 +0100 committer GitHub 1768299166 +0100 fix: prettier windows end of line not lf (#1186) S4xstree 198988f34226a4118b158bc0b707249db7db67f8 parent dd319f72d55d77042c163559cd22f95970c68ec5 author Rotzbua 1768299149 +0100 committer GitHub 1768299149 +0100 fix: remove deprecated call `QUnit.load()` (#1188) This is no longer needed since QUnit 2.1.1, and the call to QUnit.load() is safe to remove. https://qunitjs.com/api/QUnit/load/h|x9tree a00ae75565fea1cdb65a7ec18f644bb288208bcf parent ae9777c1950ae68be566d6ab37b6f885edd38c49 author Cure53 1767942998 +0100 committer GitHub 1767942998 +0100 Revert "chore: update dependencies (#1183)" (#1184) This reverts commit ae9777c1950ae68be566d6ab37b6f885edd38c49.a][xvtree 29e763748b6044beb0e7c064ec571292ad03fca2 parent 65b00726e374a5731072a8525e0ee9c2e286a518 author Rotzbua 1767942535 +0100 committer GitHub 1767942535 +0100 chore: update dependencies (#1183) - migrate to official rollup plugin `@rollup/plugin-typescript` from `rollup-plugin-typescript2` - migrate to `rimraf` v6LynxQtree a00ae75565fea1cdb65a7ec18f644bb288208bcf parent f83939c2996c2ee04cd9b20e83da7dbc9078db94 author Rotzbua 1767770280 +0100 committer GitHub 1767770280 +0100 chore: update tested nodejs version (#1181) Test currently supported nodejs versions. Drop: 18, 19, 21, 23 Add: 24, 25hLx?tree 72acc7ca1b0d4850653cc54d13fb86f51d8bfe93 parent db3e9611a95fdbe25a1e8aa2d19f6e53d69c0537 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1767455654 +0100 committer GitHub 1767455654 +0100 build(deps): bump qs and body-parser (#1178) Bumps [qs](https://github.com/ljharb/qs) and [body-parser](https://github.com/expressjs/body-parser). These dependencies needed to be updated together. Updates `qs` from 6.13.0 to 6.14.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](https://github.com/ljharb/qs/compare/v6.13.0...v6.14.1) Updates `body-parser` from 1.20.3 to 1.20.4 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](https://github.com/expressjs/body-parser/compare/1.20.3...1.20.4) --- updated-dependencies: - dependency-name: qs dependency-version: 6.14.1 dependency-type: indirect - dependency-name: body-parser dependency-version: 1.20.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>j x(tree 3e6f4308973dc7cbf9dc47f4bc9a1db8717933a0 parent 6b3ac6acb43406df6d78f8817883e8d99ddd385a author Cure53 1765226257 +0100 committer GitHub 1765226257 +0100 Update README.md?px9tree e664456827fbb7b09970f359fa5589f8749a1f8e parent ac30fecaa0a3a3f575364b33244084ab6be2389f parent 643c214a0db6fb0562dba233198a1fb6905c646b author Mario Heiderich 1765203698 +0100 committer Mario Heiderich 1765203698 +0100 Merge branch 'main' of github.com:cure53/DOMPurify ]x tree e664456827fbb7b09970f359fa5589f8749a1f8e parent 11558d897e4471c9e6057ad758819ab9780081cd author Mario Heiderich 1765203606 +0100 committer Mario Heiderich 1765203682 +0100 chore: Preparing 3.3.1 release Gҕx tree e664456827fbb7b09970f359fa5589f8749a1f8e parent 11558d897e4471c9e6057ad758819ab9780081cd author Mario Heiderich 1765203606 +0100 committer Mario Heiderich 1765203606 +0100 chore: Preparing 3.3.0 release HG͞/xtree 1f0e0f0282262acef10ac2b754063101cdd35618 parent e43768213124137cc19db5eaf67726b3dbad4226 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1764233022 +0100 committer GitHub 1764233022 +0100 build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#1170) Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>7xutree 25da49e0d27021677c0b018676039ebaf7d6f668 parent 0ab4b4df5aa1fbfba3a6053d9c9d6889031a1d59 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1764233009 +0100 committer GitHub 1764233009 +0100 build(deps): bump actions/checkout from 5 to 6 (#1171) Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>+xtree bf925ef7077356493e9a623e630c65e42ed5f426 parent caeb19174ed704eff2157925c4ca9a037f3acd72 author BinhPV 1764232653 +0700 committer GitHub 1764232653 +0100 Use correct ESM import syntax (#1173) FzxUtree 7c18fb3d57e064b1686572af854c6c0b5b638199 parent 30a3f2ae5f838d8e900a3276e429db67011d1e3d parent 983c6763f5bc995376cc48a8452c93046c58b5dd author Cure53 1762779535 +0100 committer GitHub 1762779535 +0100 Merge pull request #1168 from MariusRumpf/add-forbid-contents Add ADD_FORBID_CONTENTS settingfXx1tree 7c18fb3d57e064b1686572af854c6c0b5b638199 parent 30a3f2ae5f838d8e900a3276e429db67011d1e3d author Marius de Vries 1762773816 +0100 committer Marius de Vries 1762773816 +0100 Add ADD_FORBID_CONTENTS setting to extend default list of FORBID_CONTENTS "]ٜx|tree 2d461a953c09b84b9ff17b26e4c3ca5dfe14283c parent 506065c5dd440bf69dc2d6e7b5643dc395b807b5 parent 2a4cf346af90d5b2f4e71ab8d7dd1bc0410172a9 author Cure53 1761030805 +0200 committer GitHub 1761030805 +0200 Merge pull request #1163 from cure53/dependabot/github_actions/actions/setup-node-6 build(deps): bump actions/setup-node from 5 to 6ogv-x$tree 2d461a953c09b84b9ff17b26e4c3ca5dfe14283c parent 506065c5dd440bf69dc2d6e7b5643dc395b807b5 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1760997782 +0000 committer GitHub 1760997782 +0000 build(deps): bump actions/setup-node from 5 to 6 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5 to 6. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] (9xntree ba85316d8c681b4dceb660212d2c1ba48889838b parent c10beed843c92403634eded2aa4dcc3f3ec7aa1a author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1760425419 +0200 committer GitHub 1760425419 +0200 build(deps): bump github/codeql-action from 3 to 4 (#1161) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3...v4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>G6Rx tree 58c137d782c64a36d9f9cb1499dbd234b6720305 parent ee59f5541355e0e421e6a8d880739a05ef191f0a author Mario Heiderich 1760363489 +0200 committer Mario Heiderich 1760363489 +0200 chore: Preparing 3.3.0 release LH:xJtree 9ac2812dc4e94b2e013927ed69b1c3fb308b172a parent c3111fd6fec3ce30d0837c8b80ae7d997e8aa28a parent 6562fea45182d27f123d340ac81ab228246c666c author Mario Heiderich 1760126999 +0200 committer Mario Heiderich 1760126999 +0200 Merge branch 'main' of git@github.com:cure53/DOMPurify.git into maindx(tree 9ac2812dc4e94b2e013927ed69b1c3fb308b172a parent 6ac4ea6adb247a78f4ec25dadf80d8e3ab59010c author Prasad Rajandran 1760083715 -0400 committer GitHub 1760083715 +0200 feat: add "mask-type" SVG attribute (resolves #1154) (#1155) X[xtree 1473f31da83dc29c9eba3fde1a765105dbefb207 parent e85e12d7f60e696263f564785828cf668e2cd8ee author Cure53 1759668759 +0200 committer GitHub 1759668759 +0200 Update README.md (#1151) K@Ιx9tree fc9f11b5b9de3c453b4460c4d6c533ecf2475771 parent 524feb2cd472d79a2e81848d1fc97ef98db442ef parent e85e12d7f60e696263f564785828cf668e2cd8ee author Mario Heiderich 1759665987 +0200 committer Mario Heiderich 1759665987 +0200 Merge branch 'main' of github.com:cure53/DOMPurify ^x-x)tree fc9f11b5b9de3c453b4460c4d6c533ecf2475771 parent 38bf2b09e4140b84731c0e7d7ff3de2a18049337 author Drew Neil 1759665905 +0100 committer GitHub 1759665905 +0200 Allow ADD_ATTR and ADD_TAGS to accept a function (#1150) * feat: allow ADD_ATTR to accept a function Allow ADD_ATTR configuration option to receive a function with signature (attributeName: string, tagName: string) => boolean, enabling granular control over which attributes are allowed for specific elements. * feat: allow ADD_TAGS to accept a function Allow ADD_TAGS configuration option to receive a function with signature (tagName: string) => boolean, enabling granular control over which tags are allowed.x3tree fc9f11b5b9de3c453b4460c4d6c533ecf2475771 parent 38bf2b09e4140b84731c0e7d7ff3de2a18049337 parent 5bcadeef70abf2920691a2f116be00369442569c author Mario Heiderich 1759665636 +0200 committer Mario Heiderich 1759665636 +0200 Merge branch 'nelstrom-add-attr-as-function' &\oxZtree fc9f11b5b9de3c453b4460c4d6c533ecf2475771 parent 42c0e2b48e7dd61065129b5b3ab9b046579071b5 author Drew Neil 1759619477 +0100 committer Drew Neil 1759619477 +0100 feat: allow ADD_TAGS to accept a function Allow ADD_TAGS configuration option to receive a function with signature (tagName: string) => boolean, enabling granular control over which tags are allowed. Nx'tree b82a8bdcdf0773afc17432344bd515056ef4bc78 parent 38bf2b09e4140b84731c0e7d7ff3de2a18049337 author Drew Neil 1759617990 +0100 committer Drew Neil 1759617990 +0100 feat: allow ADD_ATTR to accept a function Allow ADD_ATTR configuration option to receive a function with signature (attributeName: string, tagName: string) => boolean, enabling granular control over which attributes are allowed for specific elements. зxtree b765cda8059f5fe25e83dfa36a397141e0d0935d parent 1b90940de9829bdde1b901eb1bc285d7f075effb author Mario Heiderich 1759334570 +0200 committer Mario Heiderich 1759334570 +0200 fix: Removed slot as SVG element, leaving it for HTML, see #1174 TTr x(tree b5ea150d09532dd63271dde87f120d2193930736 parent 41645460bc0891fb43ee8c18f0011ade5f53cf10 author Cure53 1758120804 +0200 committer GitHub 1758120804 +0200 Update README.md=͗ x(tree 8a80807daa82d8b05494a346fb33e483b58be22c parent e1256b6938414dad9585c40dfbb8a640ec318b41 author Cure53 1758120692 +0200 committer GitHub 1758120692 +0200 Update README.md;>} x(tree c348ac6fceab93821217590e7ac0d63e6b78bfb2 parent 5de6f54a151a1bd5b1c179ed49b2ba3f3e134158 author Cure53 1758110259 +0200 committer GitHub 1758110259 +0200 Update README.md%?]xtree bc2c4d1b21c6d5432d53e9538beaa19e26d825e7 parent e8cab91aaf0c94677017f6f91a0934ef16751106 author Mario Heiderich 1758107515 +0200 committer Mario Heiderich 1758107515 +0200 fix: removed a possibly dossy regex s~Kx9tree 003073c33f23b436687b4f252ae01980a4bbaca0 parent 0b860d3be7a4924997aa1ce3e0ff169fbfab79c0 parent 5ef10594030e4b85b774c67f939325f12098c532 author Mario Heiderich 1758106436 +0200 committer Mario Heiderich 1758106436 +0200 Merge branch 'main' of github.com:cure53/DOMPurify f]x tree 003073c33f23b436687b4f252ae01980a4bbaca0 parent 061e7ab82ae9d759b8addc548e6803583352bb93 author Mario Heiderich 1758106309 +0200 committer Mario Heiderich 1758106421 +0200 chore: Preparing 3.2.7 release fHhx tree 003073c33f23b436687b4f252ae01980a4bbaca0 parent 061e7ab82ae9d759b8addc548e6803583352bb93 author Mario Heiderich 1758106309 +0200 committer Mario Heiderich 1758106309 +0200 chore: Preparing 3.2.6 release g=Hlxtree 75cdaac715dcd29ee0be9cd6c380eb650d8cc838 parent f2e1a7c5b8d6b126b22d855bf1bb3b3459c9d015 author Cure53 1757949634 +0200 committer GitHub 1757949634 +0200 Update README.md docs: Added recent sponsors to acknowledgements segmentU(x|tree 51c3f36485e6669ee410ac273c4dca22199f21be parent 70892a606adb7db01211c717e1ea3b1312615d67 parent 8873cd89a58273d54bbea5e30ae73716e3b10606 author Cure53 1757517786 +0200 committer GitHub 1757517786 +0200 Merge pull request #1142 from cure53/dependabot/github_actions/actions/setup-node-5 build(deps): bump actions/setup-node from 4 to 5zu3-x$tree 51c3f36485e6669ee410ac273c4dca22199f21be parent 70892a606adb7db01211c717e1ea3b1312615d67 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1757368936 +0000 committer GitHub 1757368936 +0000 build(deps): bump actions/setup-node from 4 to 5 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 5. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] )xxtree 48343cbce5354c78b6464e17742b4e28f61d3838 parent 418921ea373616783d2f575c3880390ced4d2bc2 parent 5a23973cb69a6e6b299290825327e12716964580 author Cure53 1755316170 +0200 committer GitHub 1755316170 +0200 Merge pull request #1136 from cure53/dependabot/github_actions/actions/checkout-5 build(deps): bump actions/checkout from 4 to 5r1xtree 48343cbce5354c78b6464e17742b4e28f61d3838 parent 418921ea373616783d2f575c3880390ced4d2bc2 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1754980655 +0000 committer GitHub 1754980655 +0000 build(deps): bump actions/checkout from 4 to 5 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] +xhtree 9ed074545ba330fe610cd63bcf4a346f1e5aba4c parent 23a95db34fc28dca64f1a6357ac9ab6f96745e40 parent 5b770aeeec02009c488090e8cf331c74d0b684a8 author Cure53 1754663081 +0200 committer GitHub 1754663081 +0200 Merge pull request #1135 from cure53/dependabot/npm_and_yarn/tmp-0.2.4 build(deps): bump tmp from 0.2.1 to 0.2.4o2l)xktree 9ed074545ba330fe610cd63bcf4a346f1e5aba4c parent 23a95db34fc28dca64f1a6357ac9ab6f96745e40 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1754662066 +0000 committer GitHub 1754662066 +0000 build(deps): bump tmp from 0.2.1 to 0.2.4 Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.1 to 0.2.4. - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](https://github.com/raszi/node-tmp/compare/v0.2.1...v0.2.4) --- updated-dependencies: - dependency-name: tmp dependency-version: 0.2.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] շx=tree b57461e6df28fb70b026f93b258ba976e672fc2e parent af7b08d93276e65014c062582fae0a2a07e0ca8c parent a4cea156360adc191dee4ed3a635834ddb0ed5ba author Cure53 1754489021 +0200 committer GitHub 1754489021 +0200 Merge pull request #1128 from ssi02014/imp/types refac: improve types`xtree b57461e6df28fb70b026f93b258ba976e672fc2e parent d340a887a373e941acb1eb3ced560c175cf7e823 author ssi02014 1753606915 +0900 committer ssi02014 1753606915 +0900 feat: HookFunction type 6Bxtree 382cae8b9175d35ce2a178e60e69e04e32b17463 parent a92b8ebbaa214dd7c5bf916fbdec2e0030c2148b author ssi02014 1753606266 +0900 committer ssi02014 1753606266 +0900 fix: unconstruct parameter typo 7FMxtree 7c5a94db9fe4a343e2657034eb8eec9d24318e1d parent 75f3014b4ebc351a1f3154e55eea3a04be9c6aa0 author ssi02014 1753605994 +0900 committer ssi02014 1753606165 +0900 revert: unconstruct func ^vC x'tree a8cf6d07af4078601acd99b70b74c36840f5ac85 parent c83115cea78316e6bf675b49b2eaa4d5f3e98a14 author ssi02014 1753605323 +0900 committer ssi02014 1753605323 +0900 fix: typo `=7xtree bc33a9fd58e337760cf125fc0264767011f87702 parent b1f783d2b91205159a2b8c1738398bdff6e9eaa8 author ssi02014 1753605195 +0900 committer ssi02014 1753605195 +0900 revert: utils unapply A8xtree f2cb05983c199478b444b76185d9e7a54aff2562 parent f0dcbc4e8af6187e24f08879d2aef89b74615f73 author ssi02014 1753604564 +0900 committer ssi02014 1753604564 +0900 imp: utils functions type UCxtree 39bb83434576527c03ec29e36c4cb52e0324e546 parent af7b08d93276e65014c062582fae0a2a07e0ca8c author ssi02014 1753603714 +0900 committer ssi02014 1753603744 +0900 refac: improve types OH@vxtree e9ab17632409c3b6b1836deda4e74a975991c869 parent 60eae6f83116de82c5f433d98537de03af1adbe9 author Mario Heiderich 1753171813 +0200 committer Mario Heiderich 1753171813 +0200 fix: Fixed one broken test after regex rollback !DPGxtree 8db6f38c773f1b114e95a61ec560a3853aef072b parent 825096cf01c3b5866205eb80614ff6554df160a3 author Mario Heiderich 1753171479 +0200 committer Mario Heiderich 1753171479 +0200 fix: Relaxed one of the newly added regexes again as it's too agrresive aWØxxtree 941692fc68c7c6fb7a081677a930fb6686975e42 parent d2430c20b47d788e5226d235a2e33103f8c22d96 parent 9c1abef9ea05d9ccb7120bf82688500625e42e81 author Cure53 1753165617 +0200 committer GitHub 1753165617 +0200 Merge pull request #1127 from cure53/dependabot/npm_and_yarn/form-data-4.0.4 build(deps-dev): bump form-data from 4.0.0 to 4.0.4*pd/xtree 56a1cb289de8eacac86f8a5ea2df2780578ff77a parent abe8392ba49040aadaf071b6883e10d969035986 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1753139516 +0000 committer GitHub 1753139516 +0000 build(deps-dev): bump form-data from 4.0.0 to 4.0.4 Bumps [form-data](https://github.com/form-data/form-data) from 4.0.0 to 4.0.4. - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](https://github.com/form-data/form-data/compare/v4.0.0...v4.0.4) --- updated-dependencies: - dependency-name: form-data dependency-version: 4.0.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] cxtree 6a86ce8a991ef2e808dd0fa85692de8191de410a parent abe8392ba49040aadaf071b6883e10d969035986 author Mario Heiderich 1753130940 +0200 committer Mario Heiderich 1753130940 +0200 fix: Improved the regexes for rawtext tags a bit further #Szxrtree e89601121eebdd52c403e262e447490c8701c25a parent 943c29adf239f6a7a59df1d4cc8953ddafe72ea9 author Mario Heiderich 1753108343 +0200 committer Mario Heiderich 1753108343 +0200 fix: Improved the handling of risky content inside CDATA fix: Slightly improved the webiste attack vector loader fix: Fixed the tests to make more sense given the recent CDATA change ~rx"tree d86de9dc901b32d7b667b6e8dda21307b30556b3 parent 351d1e58078388c71c8c1dc4a27c2609d4e079c9 author Mario Heiderich 1752739591 +0200 committer Mario Heiderich 1752739591 +0200 see #1121 fix: rolling back recent changes until we have a better solution -Xxtree 2a0ef39b7272b237c19eb1b08275ae2b6e7698c2 parent 6bef59a7918e6384050fe7d661a165aabf08784c author Mario Heiderich 1752679362 +0200 committer Mario Heiderich 1752679362 +0200 see #1121 fix: Changed how RETURN_TRUSTED_TYPE=false is being handled .U;xtree 368fd0db082c9ea203f11c8c8a6c4139a29fd926 parent 40fce5d4216dc955621f6bf8a6a6b9c57254e216 author Mario Heiderich 1752044407 +0200 committer Mario Heiderich 1752044407 +0200 test: Fixed several tests to align with Firefox 140 behavior :/TAxJtree b75bf2cf1075dc1ebd781fca48055766a20db136 parent e1488746d1677d225329dab8f225769c5d00108e author Mario Heiderich 1752043540 +0200 committer Mario Heiderich 1752043540 +0200 See #1118 fix: removed another superfluous unrelated linebreak fix: attempted to split dist files into EMS and CJS Vfx9tree 151f40fad9fe9c9d30c29073fc6f575d79dc0a09 parent 5f83a510684a0bbd23cb23ff713ca5a0e65ff1b0 author Drew Neil 1750458045 +0100 committer Mario Heiderich 1751315029 +0200 feat: add tagName parameter to attributeNameCheck Allow attributeNameCheck function to receive the tag name as an optional second parameter, enabling more granular control over which attributes are allowed for specific custom elements. 8=xtree a81c288402e0e1a0019db97bf6e4d1a311588c3b parent c08ed8e10c00e777bfb7a5010ae82afcd45e1ce2 author Mario Heiderich 1751314662 +0200 committer Mario Heiderich 1751315023 +0200 See #1116 fix: Removed superfluous newline messing up the demo JU0xtree cc356af0019d15a5187827c21037fc41512de395 parent 5e203c873dabef8a5e685eadd16616456c7cda99 author Mario Heiderich 1748871095 +0200 committer Mario Heiderich 1748871095 +0200 fix: Added better check for animated href attributes, thanks @llamakko Q7XK x(tree c4826826c80e9cdcb540bbcd1dce87911237e6ea parent 8f1b9ffe952b5aa0ddcc8b5b6126a2dc83c70bd6 author Cure53 1748348831 +0200 committer GitHub 1748348831 +0200 Update README.mdQ@:xtree b4055a54094645c2e224aa5c6a82aa830ca63108 parent f693a21dce88f2be4b49e1d483164a38907360a3 author Mario Heiderich 1748348128 +0200 committer Mario Heiderich 1748348128 +0200 feat: Added several new tags and attributes to allow-list uRx]tree 3591c1e9178e43c570977e1b0cbfd3b25c015264 parent bcd759efcd1783dbe010ba7a6b1dc729052cd148 parent 8b5798cbe3c907989d004d14cbc905b6ec6a2f45 author Cure53 1748263961 +0200 committer GitHub 1748263961 +0200 Merge pull request #1110 from elrion018/add_inert_attribute feat : add inert attribute and search tag-tkRxtree 3591c1e9178e43c570977e1b0cbfd3b25c015264 parent a87cec2ca9f5be7fb34d2610393c38a8e69d47d2 author karl 1748262818 +0900 committer karl 1748262818 +0900 rearrange inert element with alphabetical order GKxtree 5cf1b036727a562b09d5193d1bd7b61d73aeeb7f parent 784d4feead47a73ef7853be1d5a59cf9f315e804 author karl 1748261416 +0900 committer karl 1748261416 +0900 add search tag into allowed list and make a test case Mxtree 9148c71c959c23b520c8c921ac5729a838a3b810 parent bcd759efcd1783dbe010ba7a6b1dc729052cd148 author karl 1748259510 +0900 committer karl 1748259510 +0900 add inert attribute into allowed list and make a test case O x tree 44057fcd50c0217e027b51e832d896b8d9f3c1cc parent 3d5603dd0a04670e2b4a09d22d356ab0280e8374 author Mario Heiderich 1747666588 +0200 committer Mario Heiderich 1747666588 +0200 chore: Preparing 3.2.6 release \HYx@tree 2fbe476508174d5658661759b107339b7f99aa1c parent 9ff0755b5e670c5c93b34973559347991db1a029 author Mario Heiderich 1747567073 +0200 committer Mario Heiderich 1747567073 +0200 chore: removed unused test server script fix: hardened more config properties against prototype pollution Kye| x(tree 410a902854855810283a6dc01bf7b60c4e32354b parent 66866e4d17ee98298cce36cdaa885924e42d6706 author Cure53 1747477475 +0200 committer GitHub 1747477475 +0200 Update README.md= x(tree 10c5a574da9e202dc1e1c48f8c131845ea1a085e parent 20f90b7c5b1b7721b610526a8ddee8af76402f47 author Cure53 1747403660 +0200 committer GitHub 1747403660 +0200 Update README.mdS>x\tree 410a902854855810283a6dc01bf7b60c4e32354b parent 103b7b8f9314ef704703ebe227e287270452b2fa parent 504761d11690bfdfd890c2476f6b633dddb0a6dc author Cure53 1747234841 +0200 committer GitHub 1747234841 +0200 Merge pull request #1101 from odaysec/patch-1 fix(server): Uncontrolled data used in path expressionixtree 410a902854855810283a6dc01bf7b60c4e32354b parent 103b7b8f9314ef704703ebe227e287270452b2fa author Zeroday BYTE 1747178306 +0700 committer GitHub 1747178306 +0700 Update server.jsCx tree 5216080acad743f3af8fc88b084fc87132a7e550 parent 0315d4d78141c125c7869c68b529eb91b3e2a7ec author Mario Heiderich 1745907159 +0200 committer Mario Heiderich 1745907159 +0200 see #1095 feat: Added matrix: to allowed URI schemes 9DOxHtree 31b619fc25910d0492eb97cb243a1ee6fd612d6b parent c5e172d9e2a0df1d54a7ad4422cb011498f43b54 parent 2681224484f598e45723ac5c0fc2659d8f52fa1e author Cure53 1745831374 +0200 committer GitHub 1745831374 +0200 Merge pull request #1096 from Rotzbua/fix_missing fix(docs): add missing bracket8c`xtree 31b619fc25910d0492eb97cb243a1ee6fd612d6b parent c5e172d9e2a0df1d54a7ad4422cb011498f43b54 author Rotzbua 1745769563 +0200 committer Rotzbua 1745769563 +0200 fix(docs): add missing bracket ҬRxtree e8ea004a02da7a9df26216471500867aba36eada parent e37af9bcb5789a3355e008c0322d4e3a246bc561 author Cure53 1745587215 +0200 committer GitHub 1745587215 +0200 Update README.md Fix #1092; AxLtree 6f2710626eba3ec6b53d79861bb27825577ab5cc parent bcaa23a27fda176aa4efcc67b5ba30cab86ce379 parent 3642507c0fcb05a081bf2914ea5abb7f679f030f author Cure53 1745421134 +0200 committer GitHub 1745421134 +0200 Merge pull request #1090 from Rotzbua/fix_typo_nodejs fix(docs): typo nodejs version` fxQtree 2e127c6fe1a721006ed52e222b3a8466b23ad48b parent e3c0efec39cdb7056e348130f6e687834177c375 parent fd8a1a2864e44fedd1fed4273e531ea52d63a583 author Cure53 1745421107 +0200 committer GitHub 1745421107 +0200 Merge pull request #1091 from Rotzbua/chore_outdated chore(docs): remove obsolete mention!-gx tree 2e127c6fe1a721006ed52e222b3a8466b23ad48b parent e3c0efec39cdb7056e348130f6e687834177c375 author Rotzbua 1745408946 +0200 committer Rotzbua 1745408946 +0200 chore(docs): remove obsolete mention vU xtree 5e742a494d290567fd23dec40c40592584856fda parent e3c0efec39cdb7056e348130f6e687834177c375 author Rotzbua 1745398113 +0200 committer Rotzbua 1745398113 +0200 fix(docs): typo nodejs version >Rlxstree c9b32810c0bde5e3418060d3e061d3245073c624 parent 22c43e47cd30c65b7cc8ed7a157e1e2bd5075266 parent 0d8efbe11c92930bf6207e748fc28032a7fd288d author Cure53 1744360537 +0200 committer GitHub 1744360537 +0200 Merge pull request #1085 from michalnieruchalski-tiugo/remove_attribute_when_necessary Remove attribute only when necessaryhux+tree c9b32810c0bde5e3418060d3e061d3245073c624 parent 22c43e47cd30c65b7cc8ed7a157e1e2bd5075266 author michalnieruchalski-tiugo 1744204904 +0200 committer michalnieruchalski-tiugo 1744226098 +0200 Remove attribute only when necessary 1aZx tree f43d04367a89e81c06b3adc77ba02df8b2298b65 parent 867628e095fd5f607b2c3a5d828fb55ef207f824 author Mario Heiderich 1743684481 +0200 committer Mario Heiderich 1743684481 +0200 chore: Preparing 3.2.5 release dH֜xltree 402f457922c45d4653f7c52beb1eff8dd7632cc9 parent ee90b5b3a6160b330f8a512561bcaa35344f0b3b parent 46fee087e33916e8071a9a297bdbb82b46ced583 author Cure53 1743496357 +0200 committer GitHub 1743496357 +0200 Merge pull request #1080 from hhk-png/main fix: Using ALLOWED_URI_REGEXP with the 'g' flag leads to incorrect result+nӜ x#tree 402f457922c45d4653f7c52beb1eff8dd7632cc9 parent 4c66b2361cd695c0314555a9d912a7046377ccff author hhk-png 1743495508 +0800 committer hhk-png 1743495508 +0800 chore: for lint a@ x"tree f7d0900a66425b02376f1cd5371b9dd91ec6f4c5 parent 9198cf427e6e4b1a102529530715b795d65bbeeb parent ee90b5b3a6160b330f8a512561bcaa35344f0b3b author hhk-png <221050102@hdu.edu.cn> 1743494246 +0800 committer GitHub 1743494246 +0800 Merge branch 'cure53:main' into main iT>xtree 8868c24fa36d24655be9df0920bbd1745dff8283 parent 6a4654fdd1fc2e6618b4b3473c5b8a8f2c2200db author hhk-png 1743427608 +0800 committer hhk-png 1743427608 +0800 fix: Using ALLOWED_URI_REGEXP with the 'g' flag leads to incorrect results T^ x(tree 320d3fbd8ebd5f18cc91162ae9dc7436df613b60 parent fac22018e454344b3f0becc83986b9fba5a83682 author Cure53 1743425441 +0200 committer GitHub 1743425441 +0200 Update README.md/?2x9tree 3f7c976f00e6b7449596a75fb8276a8b92b7883a parent 8a418e87d7027d9b6e57354940773e9663549d05 parent 6a4654fdd1fc2e6618b4b3473c5b8a8f2c2200db author Mario Heiderich 1743424593 +0200 committer Mario Heiderich 1743424593 +0200 Merge branch 'main' of github.com:cure53/DOMPurify l\xtree ed67be22e8210c5418743fd4b1cd573c075d7d7f parent b7a95291d1301a5931e0520023143a2eb6181971 author Mario Heiderich 1743424530 +0200 committer Mario Heiderich 1743424530 +0200 test: Added Node 23.x to tested runtimes, removed Node 17.x Qx>tree 63beb0d9c943dd7a025705ada2c04c646e2ec797 parent e9b91772d37d6ad0763625dd0b4f0c2af4ea0355 parent cf850170211bede230c0f6f37c637fa01d0f704f author Cure53 1742815442 +0100 committer GitHub 1742815442 +0100 Merge pull request #1078 from reduckted/fix-sourcemaps Fix sourcemaps.`Ŗxtree 63beb0d9c943dd7a025705ada2c04c646e2ec797 parent e9b91772d37d6ad0763625dd0b4f0c2af4ea0355 author reduckted 1742813155 +1000 committer reduckted 1742813155 +1000 Fix sourcemaps. Gxbtree 3efc0dde992d78eb9132ce296c1ba5af9816bb88 parent d5e80f9fe52e731f08fab042d971824151d83b5e parent b2061eaaa8969cd47f40500da9eb281974480750 author Cure53 1742296609 +0100 committer GitHub 1742296609 +0100 Merge pull request #1073 from donmccurdy/fix/trusted-types-lib fix(trusted-types): Use 'trusted-types/lib'&m̒xtree 3efc0dde992d78eb9132ce296c1ba5af9816bb88 parent cefab9f66407401088daa7ea0a997285b6d82fdf author Don McCurdy 1742240568 -0400 committer Don McCurdy 1742240568 -0400 use ESM type imports in source, remove patch function -Wxtree c130f9e42723bf943fe42550635da668ffd24695 parent d5e80f9fe52e731f08fab042d971824151d83b5e author Don McCurdy 1741299334 -0500 committer Don McCurdy 1742240047 -0400 fix(trusted-types): Use 'trusted-types/lib' GQ~xhtree 3dd9d6d2af509a6ba201e6b5b860003d7f835778 parent 0ddb6294a6a55f133b2c0890270ad89e7a760e58 parent 7acdfc0f24f9550d4be245e6535de915909b4d90 author Cure53 1742139521 +0100 committer GitHub 1742139521 +0100 Merge pull request #1075 from reduckted/feature/verify-typescript test: verify various typescript configurationsǢqHxtree 3dd9d6d2af509a6ba201e6b5b860003d7f835778 parent 1b5a8a29e83b247172d4609fd0f017e842063d7d author reduckted 1742037550 +1000 committer reduckted 1742037550 +1000 Improved display of verification results. ɱPDxtree 368a27ec56397be9bada3e3b6107d02a74055ec6 parent 0ddb6294a6a55f133b2c0890270ad89e7a760e58 author reduckted 1741779662 +1000 committer reduckted 1742035497 +1000 Added script to verify various TypeScript configurations. IVx5tree 02753eed90a5e48b0a381341f049b41b443417a3 parent b7a95291d1301a5931e0520023143a2eb6181971 parent 624e49e51ff09bc6291fabc8e45a69cbc2208b5f author Cure53 1741191727 +0100 committer GitHub 1741191727 +0100 Merge pull request #1069 from KanhaKanhaiya/patch-1 Fix typo.Znxtree 02753eed90a5e48b0a381341f049b41b443417a3 parent b7a95291d1301a5931e0520023143a2eb6181971 author KanhaKanhaiya 1741114241 +0530 committer GitHub 1741114241 +0530 Fix typo.>A x(tree f663c9402eb2d55bab89bbf2f34a16f143b55275 parent 3682b84c0600b38cf54021415f9e1c3fce13ce04 author Cure53 1740399294 +0100 committer GitHub 1740399294 +0100 Update README.md>y>ux'tree 8dacd62cdfb01603357a97dd288e1332cc43c754 parent 02ab65d3324902bc27873b1a0a2ebacfd5895340 author Mario Heiderich 1740398592 +0100 committer Mario Heiderich 1740398592 +0100 See #1067 * Added NodeJS v22 to test suite * Removed NodeJS v16 from test suite $Wғx|tree b1ceef9aed18d626f0f35bdb570f71169e5652aa parent 934599ac4d92da2206da9f45ee2a5e6f8a29710c parent 445be71c156106b032e3322bdb94715ceb74ca52 author Cure53 1740226653 +0100 committer GitHub 1740226653 +0100 Merge pull request #1065 from reey/main chore(package.json): add `dist/purify.js` and `dist/purify.min.js` to exports as targetable modulesyxBtree b1ceef9aed18d626f0f35bdb570f71169e5652aa parent 934599ac4d92da2206da9f45ee2a5e6f8a29710c author Tristan Bastian 1740001970 +0100 committer GitHub 1740001970 +0100 chore(package.json): add `dist/purify.js` and `dist/purify.min.js` to exports as targetable modulesPidx tree 01e94edfad76ad036d2cab296e4508526bf212ec parent 3c20dd53babbce48dd7d6028889fde9d6f62e0b2 author Mario Heiderich 1739799520 +0100 committer Mario Heiderich 1739799520 +0100 test: Changed latest Safari version from 18.2 to 18.1 qQ̓xtree 34e73d013f2f55e25f4bca257e84680b432c249c parent 0b4bd80b3f14554c90a204bad1261935aff45e8b author Mario Heiderich 1739798788 +0100 committer Mario Heiderich 1739798788 +0100 test: Added more modern browsers to the Karma launchers list xT͑xtree 2571a14c6d486d1c0a23abd2b58e20ab9afb69ef parent e93c386151980a4ffbd84831696ef54f849d8d03 author Mario Heiderich 1739794198 +0100 committer Mario Heiderich 1739794198 +0100 fix: Added an experimental fix for an mXSS detection regex ±T x tree 753ce0694034a726267ed4ecac0fe9895f021f24 parent 8f7c36a3f91eb48c79e105c0c8181cbd944a3d8d author Mario Heiderich 1738221463 +0100 committer Mario Heiderich 1738221463 +0100 chore: Preparing 3.2.4 release Hx!tree 1cae45a6845fb66f450f3ae14f42a1f15a1db9cc parent aa23c4ee583158dac2be41da522ac9e73777ce0b author Mario Heiderich 1738148555 +0100 committer Mario Heiderich 1738148555 +0100 fix: Changed the template literal regex to avoid a config-dependent bypass [Ixgtree 42b49561f6d1c97b8c02025096d81cf0b3cfa8d8 parent 58e6ddc507365d286f4ed16d410c411a52c2bc66 parent ed4f47010baf89462d482230d1c396e59d590bfa author Cure53 1737551546 +0100 committer GitHub 1737551546 +0100 Merge pull request #1060 from yehuya/initializeTestImprovements tests: DOMPurify custom window test improvement6p x'tree 42b49561f6d1c97b8c02025096d81cf0b3cfa8d8 parent 58e6ddc507365d286f4ed16d410c411a52c2bc66 author yehuya <> 1737547301 +0200 committer yehuya <> 1737547301 +0200 tests: DOMPurify custom window tests improvements @xntree 3b6fbb35de594c63d73cb8f4051f9384ae7a3e92 parent 8413123955f354c1da5ab5af1a148b2240013e93 parent ffb4bcd2420b96a0a0105abcea4b61c28cf639f4 author Cure53 1737545301 +0100 committer GitHub 1737545301 +0100 Merge pull request #1059 from yehuya/fixMissingWindowElement fix: handle undefined Element in DOMPurify initialization rΐ xOtree 3b6fbb35de594c63d73cb8f4051f9384ae7a3e92 parent 06076a8644b0558c5ff97662beaf1d72286f868a author yehuya <> 1737544593 +0200 committer yehuya <> 1737544593 +0200 Fix tests \1Wxtree a1580858c68638d39a613937e4d85f61e125aac0 parent 8413123955f354c1da5ab5af1a148b2240013e93 author yehuya <> 1737481606 +0200 committer yehuya <> 1737481606 +0200 fix: handle undefined Element in DOMPurify initialization N}Aƕ x*tree d884e748866cd7884ee4db657714100597089315 parent 134d882f1e212fe12c80434611a60a86fe6be401 author Cure53 1735735478 +0100 committer GitHub 1735735478 +0100 Update LICENSE 1735567798 +0100 committer GitHub 1735567798 +0100 Update README.md@>xYtree 7bfcd3a5e71b326bda483b6ca8ca85164ae4e797 parent 36335c4d27c9e0d10d9d200178051c7e7b45faad parent 16f271ebc2f2a695e0450a53671e46da5d070e1d author Cure53 1735404713 +0100 committer GitHub 1735404713 +0100 Merge pull request #1054 from davecardwell/main feat: allow specifying a hook with `removeHook()`ةjxtree 7bfcd3a5e71b326bda483b6ca8ca85164ae4e797 parent 36335c4d27c9e0d10d9d200178051c7e7b45faad author Dave Cardwell 1735335586 +0000 committer Dave Cardwell 1735335586 +0000 feat: allow specifying a hook with `removeHook()` ,Vxtree cc2c42221c268f860ea20d614e73c31a8d121329 parent e5db90f66a1f1356fbb34b6cb847a00dafefe1da parent 8f3c8377917b24da145b675ecb05f77968859e79 author Cure53 1735122113 +0100 committer GitHub 1735122113 +0100 Merge pull request #1053 from Aetherinox/main chore(package.json): add `purify.js` and `purify.min.js` to exports as targetable moduleswxbtree cc2c42221c268f860ea20d614e73c31a8d121329 parent e5db90f66a1f1356fbb34b6cb847a00dafefe1da author Aetherinox 1735114821 -0700 committer Aetherinox 1735114821 -0700 chore(package.json): add `purify.js` and `purify.min.js` to exports can now directly import both minified and uncompressed library scripts QuCxwtree df03db61f4d546f18391d8e9db473310908be8ed parent f0bb960a53d9837b53f6ee9eb02f9394c3d39880 parent d077850e15818304afd3c3cedf130e779a40b77d author Cure53 1734357530 +0100 committer GitHub 1734357530 +0100 Merge pull request #1049 from cure53/dependabot/github_actions/GabrielBB/xvfb-action-1.7 build(deps): bump GabrielBB/xvfb-action from 1.6 to 1.7Cx-x tree df03db61f4d546f18391d8e9db473310908be8ed parent f0bb960a53d9837b53f6ee9eb02f9394c3d39880 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1733783647 +0000 committer GitHub 1733783647 +0000 build(deps): bump GabrielBB/xvfb-action from 1.6 to 1.7 Bumps [GabrielBB/xvfb-action](https://github.com/gabrielbb/xvfb-action) from 1.6 to 1.7. - [Release notes](https://github.com/gabrielbb/xvfb-action/releases) - [Commits](https://github.com/gabrielbb/xvfb-action/compare/v1.6...v1.7) --- updated-dependencies: - dependency-name: GabrielBB/xvfb-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] ȕx tree 124dcf5e3d0a67d5c39034260ef0ba6e433a6f72 parent b1938cba9a2f890a50225d110baf7fff1a4a8b9a author Mario Heiderich 1733733129 +0100 committer Mario Heiderich 1733733129 +0100 chore: Preparing 3.2.3 release 9I{xtree 33ba992d41859b2ded7d9e42c3f5a0071ac3d36c parent ac6e2fe825ebc202e5b7b66f00dd2cb41f1fead8 author Mario Heiderich 1733578896 +0100 committer Mario Heiderich 1733578896 +0100 fix: Added clobbering check for sanitizeAttribute to prevent an error 0Z x1tree 237167244e318d09134939a6f8e5fd19ea0fa6e3 parent 477e4e55c61b711263e9aa5896672fbea9468c34 author Mario Heiderich 1733485521 +0100 committer Mario Heiderich 1733485521 +0100 fix: Fixed a config-dependent bypass caused by skipped attribute checks, thanks @parrot409 {^x(tree 5f825e422ac37982e21dcbe9ee047319439b249e parent 03550873f0f0b13f3c0511c3e7b0cedd4f0f62f1 author Mario Heiderich 1733479948 +0100 committer Mario Heiderich 1733479948 +0100 fix: Fixed a config-dependent bypass relating to data-attributes, thanks @Slonser ?\xBtree 17e154a4daf99d36c53882514e2ea3d8b0091169 parent f234e70a089e71a75648d39828ca787d0a377719 parent 0f05fb547d91aeaddf8722cb25b17f9bc0ce919c author Cure53 1733320878 +0100 committer GitHub 1733320878 +0100 Merge pull request #1041 from CoryHrycko/patch-1 Removed redundant commenta.xtree 17e154a4daf99d36c53882514e2ea3d8b0091169 parent f234e70a089e71a75648d39828ca787d0a377719 author CoryHrycko <40903917+CoryHrycko@users.noreply.github.com> 1733320136 -0500 committer GitHub 1733320136 -0500 Update tags.ts Removed redundant comment5S x(tree c8512f3eeae2d5527f89f2d6c91b2366c997fd42 parent ed17aff188807baef7877c7acb889bb03bd84758 author Cure53 1733315071 +0100 committer GitHub 1733315071 +0100 Update README.md?` x(tree 9e9ad77ed07ff5e15cdd4b1c95fc1f70e73d675b parent a3ca832c0c8540aa5b0db6d0a04780fed0aa58d8 author Cure53 1732878257 +0100 committer GitHub 1732878257 +0100 Update README.mdg@7x+tree 7104c2363edfe2beb0cd5d2ade7757fb889d2bc7 parent 9e6201779312ba6837a6b50bf2850e9342537756 parent e22c52cbfa0ec360b80818f62b42ebfa5f109a37 author Cure53 1732876244 +0100 committer GitHub 1732876244 +0100 Merge pull request #1037 from svdb99/main Fix #1033sWWx tree 7104c2363edfe2beb0cd5d2ade7757fb889d2bc7 parent f3c28a24cbda62e371ddb4ee31b225d7a09fda56 author stefaan.vandenbussch 1732875616 +0100 committer stefaan.vandenbussch 1732875627 +0100 Fix #1033 Tx5tree a9651bc7e666fee565a4dd4fcfc222eb9eb5c45e parent 050b7124b578bc0e3f0ad5a6e38a83422fba860a parent 9e6201779312ba6837a6b50bf2850e9342537756 author svdb99 <58293837+svdb99@users.noreply.github.com> 1732874039 +0100 committer GitHub 1732874039 +0100 Merge branch 'cure53:main' into main k\ x tree d85fd8bb5b4a8570a2ba87dbaa4faa37c7bfe95c parent 9b31ec9d3b8608e66457ee9b80ccf795e3c81d15 author stefaan.vandenbussch 1732873971 +0100 committer stefaan.vandenbussch 1732873971 +0100 Fix #1033 Tx tree 5e955b132caa5f0bf299868dc8d4346377186691 parent b39c1d3166b571c58f1820d901c51b186c12df10 author Mario Heiderich 1732872713 +0100 committer Mario Heiderich 1732872713 +0100 chore: Preparing 3.2.2 release 0GÚx*tree 5168f17259949bd44513e3a814371e970bf67a63 parent bb21973f77a6b7abc2cdbd3bcf713ce3e3408f18 author Mario Heiderich 1732872234 +0100 committer Mario Heiderich 1732872234 +0100 fix: Fixed a possible config-specific bypass via "is" attributes, thanks @Yaniv-git \\x tree a536c588d72a0bea0064e48561b727c6ee23b8b3 parent bb21973f77a6b7abc2cdbd3bcf713ce3e3408f18 author stefaan.vandenbussch 1732646728 +0100 committer stefaan.vandenbussch 1732646728 +0100 Fix #1033 tSxhtree c341608f66623be31a95b4e50758ebcd901c58e6 parent e9f9d2b2034e851f5e1fda333a7a12ec3cc8a556 parent 242946f78b90d8e68161aed1efba5152ee601469 author Cure53 1732635035 +0100 committer GitHub 1732635035 +0100 Merge pull request #1036 from reduckted/feature/trusted-types Add triple-slash types reference to trusted-types.pRx tree c341608f66623be31a95b4e50758ebcd901c58e6 parent e9f9d2b2034e851f5e1fda333a7a12ec3cc8a556 author reduckted 1732616686 +1000 committer reduckted 1732616857 +1000 Add triple-slash types reference to trusted-types. HT,x}tree 589594e5173baede5d47d4e8fba04862d367bbaf parent f553d8f7e95b4c605901f7cae5c14a79eb8f2f1b parent b63c550a3b26e9d11b7b82df8ae620c9c6607e9f author Cure53 1732278924 +0100 committer GitHub 1732278924 +0100 Merge pull request #1031 from reduckted/feature/hook-parameter-types Changed the type of the "node" in hooks to be as specific as possible4yx<tree 589594e5173baede5d47d4e8fba04862d367bbaf parent 47674186ad7cc88f4b42420ff858c83b6c321a90 parent f553d8f7e95b4c605901f7cae5c14a79eb8f2f1b author reduckted 1732101693 +1000 committer reduckted 1732101693 +1000 Merge branch 'main' into feature/hook-parameter-types bڝxtree 31d0ac4c6910736f30abc76d403975a4ef843d92 parent 181484e5e947e4afc1733a065160772cdedae605 author reduckted 1732098727 +1000 committer reduckted 1732098727 +1000 Changed the type of the "node" in hooks to be as specific as possible. |Xx tree 9e847a7d961c55073ae14c202ee69ae0707d5c82 parent 181484e5e947e4afc1733a065160772cdedae605 author Mario Heiderich 1732087864 +0100 committer Mario Heiderich 1732087864 +0100 chore: Preparing 3.2.1 release dH]xmtree b23f0c5d72b0ec5914a4f9a43787d894cff4a2a9 parent a6b0daa064979bd808819523fcaf7d3c36eb4c04 parent b082a203abdab058a850d2ad56b08b2a92e9ea38 author Cure53 1732000458 +0100 committer GitHub 1732000458 +0100 Merge pull request #1028 from MiniDigger/optional-dompurify-argument-type fix: mark createDOMPurify param as optionalMrޔxtree b23f0c5d72b0ec5914a4f9a43787d894cff4a2a9 parent a6b0daa064979bd808819523fcaf7d3c36eb4c04 author MiniDigger | Martin 1731879250 +0100 committer MiniDigger | Martin 1731879250 +0100 fix: mark createDOMPurify param as optional VxTtree c7705f60b55891fbfcece83fd5c6bd5a1fd4422b parent aa6837529df21469e307d81c129d916e453adfe1 parent 01bfc8fe92dd638c4730d2b92fe39b5f57a20283 author Cure53 1731585324 +0100 committer GitHub 1731585324 +0100 Merge pull request #1025 from asamuzaK/opt Move @types/trusted-types to optionalDependencies2ixtree c7705f60b55891fbfcece83fd5c6bd5a1fd4422b parent aa6837529df21469e307d81c129d916e453adfe1 author asamuzaK (Kazz) 1731584887 +0900 committer asamuzaK (Kazz) 1731584977 +0900 Move @types/trusted-types to optionalDependencies Follow-up #1018 Xx>tree d7c2adf9666069eca34d02c7535dd3fdceb4c298 parent a9839b46e8c08af63b872d836b344f13d960d671 parent 98204fcd03ab0fcd415f8207941a87b67f00998f author Cure53 1731581315 +0100 committer GitHub 1731581315 +0100 Merge pull request #1021 from asamuzaK/type Export DOMPurify interface`xntree f52fdb5c02c8a546236eaac350ecbe96ccd7d6db parent 9cc906f7d588df48cc6a6a1604730a891a97f6d6 parent 5ea38188e28e5da35f96d3678a0f397609fba7e4 author Cure53 1731581275 +0100 committer GitHub 1731581275 +0100 Merge pull request #1022 from ghiscoding/main fix: ignore export assign cannot be used in module TS error, fixes #1018qJx[tree 84ad27b82ff33823c88815bd647bd873833b2bd8 parent d3b6aee3aadd8358fa6944e8f49b7e9b9bb5299c parent 3172184b25815933a5f1f9395e79c03a7de78e71 author Cure53 1731581135 +0100 committer GitHub 1731581135 +0100 Merge pull request #1024 from reduckted/fix/minify Ensured that purify.min.js is actually minified.CjxWtree e6b8e6d69be431c5c9e308d7a2015a9712134444 parent b9fd4b06d84414050e9c3bf846861830a7152c86 parent ee94463cfcf5cb27ec7275278fa47e08064769c0 author Cure53 1731581089 +0100 committer GitHub 1731581089 +0100 Merge pull request #1023 from reduckted/fix/export-order Moved the "import" exports to be firstnlh xtree 6a7e9eedd24a04e6bdc36c135bc962440cab4c65 parent b9fd4b06d84414050e9c3bf846861830a7152c86 author reduckted 1731580457 +1000 committer reduckted 1731580457 +1000 Ensured that purify.min.js is actually minified. >Rxtree e6b8e6d69be431c5c9e308d7a2015a9712134444 parent b9fd4b06d84414050e9c3bf846861830a7152c86 author reduckted 1731579969 +1000 committer reduckted 1731579969 +1000 Moved the "import" exports to be first. 5Nxrtree 77d55d654cf4015866b7a8cc2c015402f1271fb5 parent b9fd4b06d84414050e9c3bf846861830a7152c86 parent 0b848406600db970763cb880455d3c1a0f65000c author Ghislain B. 1731560328 -0500 committer GitHub 1731560328 -0500 Merge pull request #1 from ghiscoding/bugfix/ignore-cjs-export-error fix: ignore export assign cannot be used in module TS error, fixes #1018Y&z x tree 77d55d654cf4015866b7a8cc2c015402f1271fb5 parent 00f98943dde1b12d46d1b9108d39b00258d68a20 author Ghislain B. 1731560274 -0500 committer GitHub 1731560274 -0500 chore: run build!Axtree 3bb2f1b0a951efea62decbba77affdca8ec7ddf7 parent b9fd4b06d84414050e9c3bf846861830a7152c86 author Ghislain B. 1731559961 -0500 committer GitHub 1731559961 -0500 fix: ignore export assign cannot be used in module TS error, fixes #1018KWpxtree abecc6aae17fa99a6922929672cf6712718e4b8c parent b9fd4b06d84414050e9c3bf846861830a7152c86 author asamuzaK (Kazz) 1731553460 +0900 committer asamuzaK (Kazz) 1731557746 +0900 Export DOMPurify interface Fix #1020 Kx tree 22c403cd690cf4ea55b0be779e0413651be5c1f9 parent 1f9e5d74e1b5b43177c197dc6d817a074c439dd0 author Mario Heiderich 1731334791 +0100 committer Mario Heiderich 1731334791 +0100 chore: Preparing 3.2.0 release }H֛xKtree c0317def5a4671006969ddf27cbeeb703ae0cedf parent 6d7b469c1b612d6930c0eb79e5a33078d4518511 parent a4cfef672966596b8660fd4804bd368a69a4f8c2 author Cure53 1731150948 +0100 committer GitHub 1731150948 +0100 Merge pull request #1014 from ssi02014/refactor/types imp: improved types and utilsdoxtree c0317def5a4671006969ddf27cbeeb703ae0cedf parent 87594f55f5bb5969e223947f3eab0de11457d4ba author ssi02014 1731125682 +0900 committer ssi02014 1731125842 +0900 fix: remove types from jsdoc TDxtree c0cf013808f2250efc0e1afd5eb5f6002ff6acc7 parent 0a85a3c724a30606ed487baaa1513403db910b71 author ssi02014 1731125458 +0900 committer ssi02014 1731125548 +0900 fix: remove types from jsdoc BDDxtree a90e4972ea326bde3f0d3c26428aa6dc1fba3623 parent d6d61a82f7cfecc786cc493e45ad718ca3028d88 author ssi02014 1731125310 +0900 committer ssi02014 1731125310 +0900 fix: remove types from jsdoc Dđxtree 30ac1330e078c433c3c7b3e81bc6484018b56950 parent b83dab8bd92ab5f2fe694e5220b78a8051b73893 author ssi02014 1730974397 +0900 committer ssi02014 1730974419 +0900 docs: fixed ts-doc ?Zxtree 5789ea87699c42c36e0d140205643d80f8c1897e parent 685dbf98368e3860b1253f7602a58c47380a8178 author ssi02014 1730973260 +0900 committer ssi02014 1730973260 +0900 docs: improved ts-doc ?xtree 58f6a2cb4ff7e613c67735b056ddc144f71fa248 parent 6d7b469c1b612d6930c0eb79e5a33078d4518511 author ssi02014 1730968838 +0900 committer ssi02014 1730972347 +0900 imp: improved types and utils Cxetree f3a81d7491555e689ea32056c58163234ce4a494 parent 2108f40999b24c31c5c0117cb03b09943c9cb5c3 parent ea41ee7330cd8823f6c38cc023c4e1f17ea9a703 author Cure53 1729671118 +0200 committer GitHub 1729671118 +0200 Merge pull request #1008 from aloisklink/fix/export-Config-type fix(types): export `Config` type from packagemx>tree f3a81d7491555e689ea32056c58163234ce4a494 parent 2108f40999b24c31c5c0117cb03b09943c9cb5c3 author Alois Klink 1729617023 +0900 committer Alois Klink 1729617023 +0900 fix(types): export `Config` type from package This is to more closely match [@types/dompurify][1] [1]: https://github.com/DefinitelyTyped/DefinitelyTyped/blob/a0058c8132907c88b6e4d3dd0f4103f799deb732/types/dompurify/index.d.ts#L59 ϬxGtree 227f42d33e192a298d14868e1377dafd8d585b0f parent c51f807652af092f100c976c735d2beedf4d7fbe parent 6dcb340dadd8ab9fbbebc4757997cc967ede8e18 author Cure53 1729278118 +0200 committer GitHub 1729278118 +0200 Merge pull request #1006 from reduckted/type-declarations Add Type DeclarationsceLxtree 227f42d33e192a298d14868e1377dafd8d585b0f parent 805164dd34ecaf5fa9d0dbb033148a9607b896f6 author reduckted 1729164261 +1000 committer reduckted 1729253756 +1000 Updated `dist` files. _Hxtree fcfff2887949e46b71002beb5749e96bf44e7859 parent 18ec503da40626f7462399e0c9bf67d2220e312c author reduckted 1729163882 +1000 committer reduckted 1729253755 +1000 Generated type declaration files. M2xtree 2c13cd97bd2824065627ba94b216d41f2f94fc70 parent c1ea77e74c7bb58450756929499f71aa75c226b0 author reduckted 1729163227 +1000 committer reduckted 1729253577 +1000 Updated Rollup dependencies and installed `rollup-plugin-dts`. ^Wx2tree 99d5dacbc19a4b3ff4b65b3e081fa92f17e06d5c parent aa19cc4161ee7a970e8f3df63795013cee91ac78 author reduckted 1728732092 +1000 committer reduckted 1729076304 +1000 Added type annotations to the public interface so that type declarations can be generated. cxtree 1f391ab4b40ef1026f0b6bae8a3b096deb9ddc10 parent 348826072bacf797b29f4a7aaa759f00f08324db author reduckted 1728473804 +1000 committer reduckted 1729076165 +1000 Added type annotations to utils. 4MM͕x tree 3c4874bf7b4477ab5201395a8745ce19b2b1e505 parent 617f6512183cf454dfafc1d02a2a609ee0e2595f author reduckted 1728645919 +1000 committer reduckted 1729076165 +1000 Defines types for the config. `K`xtree 50d5b9617af5fefc11c892c7654db35293c2519e parent 2ddd1a805190cd4d718da44ae796b64b00049541 author reduckted 1728472116 +1000 committer reduckted 1729076164 +1000 Configure rollup to process TypeScript. Oxtree 454d22827d815dcc68ff4df4ac9ce12b02e9ca6a parent bf2149befc69bec2c297247ca59a5b3381aebe9c author reduckted 1729075780 +1000 committer reduckted 1729076163 +1000 Disabled some lint rules. Kx tree b6a233ef1d03da36f9cbe116a9fd3505c6fdbfad parent 0f19d4d8b84ff2d8f12220720c35706dfb57c5ae author reduckted 1728472098 +1000 committer reduckted 1729073208 +1000 Rename `.js` files to `.ts`. mDKxtree 87ad54de18db14670d85a812b09e0d5c24d5522a parent c51f807652af092f100c976c735d2beedf4d7fbe author reduckted 1728471244 +1000 committer reduckted 1729073207 +1000 Add TypeScript config. Ivx#tree fcccfe94a6dcfc512991a7f16160a7719aed4157 parent 445c074b3cc1997ca0d71c5dbb851dd80747855a author Mario Heiderich 1728633467 +0200 committer Mario Heiderich 1728633467 +0200 see #1022 feature: Added configurability for text & HTML integration points țYpxltree 21754969234ae0ce31c2e304a7ba4d9ce29253c5 parent eba8295ea53d88c330da1010f79a54447ff4c15a parent fa17c3de3ed3d79cd4a862032acc8810e2036a9e author Cure53 1728631489 +0200 committer GitHub 1728631489 +0200 Merge pull request #1004 from cure53/dependabot/npm_and_yarn/multi-82ad408bf4 build(deps): bump cookie and socket.iokQoٔCx4tree 21754969234ae0ce31c2e304a7ba4d9ce29253c5 parent eba8295ea53d88c330da1010f79a54447ff4c15a author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1728570097 +0000 committer GitHub 1728570097 +0000 build(deps): bump cookie and socket.io Bumps [cookie](https://github.com/jshttp/cookie) and [socket.io](https://github.com/socketio/socket.io). These dependencies needed to be updated together. Updates `cookie` from 0.4.2 to 0.7.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](https://github.com/jshttp/cookie/compare/v0.4.2...v0.7.2) Updates `socket.io` from 4.7.5 to 4.8.0 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/socket.io@4.7.5...socket.io@4.8.0) --- updated-dependencies: - dependency-name: cookie dependency-type: indirect - dependency-name: socket.io dependency-type: indirect ... Signed-off-by: dependabot[bot] jxtree 0c8ecaa7b9e1197262d4a1d20d122cd9211a5e5b parent 8849771b1fa54a3ba67e2fb0c294c7a1032a4a69 author Mario Heiderich 1728464305 +0200 committer Mario Heiderich 1728464305 +0200 fix: Changed the order of attribute checks for safer hooks handling $Wfx tree e3075e9b52503de22bfe6078dba86f4615db9ef6 parent 597b5fb2c67d3228f8ac9cc4de96bc08ef0ee124 author Mario Heiderich 1727348573 +0200 committer Mario Heiderich 1727348573 +0200 chore: Regenerated source maps Kx tree 774bc223e6fd8b06403975f914238d9ea1d41db8 parent 9ceb3d412504c681198ee91b68c1ed5bd8b7345a author Mario Heiderich 1727345479 +0200 committer Mario Heiderich 1727345479 +0200 chore: Preparing 3.1.7 release HҚx%tree 3e244ea1c9e6fa8276439b13dfdeb1efdaedd028 parent 2786cc52291baa18c07dc3d153fbf4d30fd49c56 author Mario Heiderich 1727345018 +0200 committer Mario Heiderich 1727345018 +0200 fix: Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @masatokinugawa fix: Removed the foreeignObject element from the lost of HTML entrypoints, thanks @masatokinugawa chore: Updated build and test dependencies Exztree 212a55d44a4af3c7af5cf18633b03eefa73bf998 parent 58d0c08c4761a43a66fe414477dcb6993d65a58f parent 458855b2056b93c041fe34c70f8c73bdc1926972 author Cure53 1726571476 +0200 committer GitHub 1726571476 +0200 Merge pull request #993 from cure53/dependabot/npm_and_yarn/body-parser-1.20.3 build(deps): bump body-parser from 1.20.1 to 1.20.3Or.xtree 212a55d44a4af3c7af5cf18633b03eefa73bf998 parent 58d0c08c4761a43a66fe414477dcb6993d65a58f author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1726520026 +0000 committer GitHub 1726520026 +0000 build(deps): bump body-parser from 1.20.1 to 1.20.3 Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.1 to 1.20.3. - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](https://github.com/expressjs/body-parser/compare/1.20.1...1.20.3) --- updated-dependencies: - dependency-name: body-parser dependency-type: indirect ... Signed-off-by: dependabot[bot] ,DxWtree 7c3441369e0c67c175a43e031ac6ef4f667bfee6 parent aac7df1a57bc77849783d0c016f8bb58bff287ab parent 423fc6495c14741741128303220b4b05a5004013 author Cure53 1725518032 +0200 committer GitHub 1725518032 +0200 Merge pull request #990 from jeroen1602/angular_support Added support for the Angular compiler.Ӱh@-x-tree ebf1d76418d12e562605ea21541771ecb26b0beb parent 637cfe3176798d4256d98e39f3edadce78dc5868 author Jeroen <1492076+jeroen1602@users.noreply.github.com> 1725370038 +0200 committer Jeroen <1492076+jeroen1602@users.noreply.github.com> 1725370038 +0200 Added support for the Angular compiler. The Angular compiler looks for the main field using a few fields in the package.json. The order it uses is: - es2020 - es2015 - browser - module - main The first entry the Angular compiler would find before this change was the 'browser' entry point. This is however compiled as an `umd` and Angular is looking for an `esm` so it would complain (it would still work though). Adding `es2020` as an entry point fixes this problem. Vxvtree 3d215e41e3d81d8a56c83688b61980f1937a6938 parent 637cfe3176798d4256d98e39f3edadce78dc5868 parent d3e14d2d9b9672215f4812ea7998c580979f6a8c author Cure53 1725369375 +0200 committer GitHub 1725369375 +0200 Merge pull request #989 from cure53/dependabot/npm_and_yarn/webpack-5.94.0 build(deps-dev): bump webpack from 5.76.1 to 5.94.0Pp(xztree 3d215e41e3d81d8a56c83688b61980f1937a6938 parent 637cfe3176798d4256d98e39f3edadce78dc5868 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1725015186 +0000 committer GitHub 1725015186 +0000 build(deps-dev): bump webpack from 5.76.1 to 5.94.0 Bumps [webpack](https://github.com/webpack/webpack) from 5.76.1 to 5.94.0. - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](https://github.com/webpack/webpack/compare/v5.76.1...v5.94.0) --- updated-dependencies: - dependency-name: webpack dependency-type: indirect ... Signed-off-by: dependabot[bot] x^tree 11de5489afe12665989b5af876971f7266c8c00d parent 2944bfaef0a972f55215a821b5341b239d041e06 parent 27c6e534c5f3f49ef48478020efeb0a4cb8c16b1 author Cure53 1724154672 +0200 committer GitHub 1724154672 +0200 Merge pull request #987 from Gigabyte5671/svg-fefunc-attributes Allow SVG transfer function attributesCkrxtree 11de5489afe12665989b5af876971f7266c8c00d parent 2944bfaef0a972f55215a821b5341b239d041e06 author Giga 1724151025 +1200 committer Giga 1724151025 +1200 Add SVG transfer function attributes to allow list HLxVtree eb17befe01b63da6dc8301318dcaf046741ecdb7 parent c92e9596a20f8cdde62ce4343d1cd27d55ec7af4 parent 615bc950f5aa519ba4d2e10daa08e1e127e7d7fa author Cure53 1721396367 +0200 committer GitHub 1721396367 +0200 Merge pull request #983 from christianhg/patch-1 fix: typo in karma.custom-launchers.config.jsRyk4x tree eb17befe01b63da6dc8301318dcaf046741ecdb7 parent c92e9596a20f8cdde62ce4343d1cd27d55ec7af4 author Christian Grøngaard 1721120462 +0200 committer GitHub 1721120462 +0200 fix: typo in karma.custom-launchers.config.jsUx tree c1a8c930da10ace13ab9059aeb4aa608fdf39693 parent 8fc1a7f13cddaf148a54cc4603098d1005ae3bec author Mario Heiderich 1720174517 +0200 committer Mario Heiderich 1720174517 +0200 fix: Fixed a typo on the README Jx tree bc6e038e23d13d7cc1326379cc1d18b6cdf2947c parent 76f9fdb541c669357c11830fa0341dda8279fb87 author Mario Heiderich 1720165898 +0200 committer Mario Heiderich 1720165898 +0200 chore: Preparing 3.1.6 release Hxtree 989ce0629eefc3eb1e24e1e3aa5b4b73d2e0fba1 parent e823c50bd55b76bb41d0766d370041d3dba217ff author Mario Heiderich 1720114360 +0200 committer Mario Heiderich 1720114360 +0200 fix: Made sure that remove() is not called directly from node X Uoxtree d31d7a0b3c582b230849ebb552e496159bec996e parent e6b2361bd30a6f1ad9f0306498b554197db144d0 author Mario Heiderich 1720102211 +0200 committer Mario Heiderich 1720102211 +0200 fix: Fixed a DOM clobbering issue leading to an error being thrown U͟xotree b32cb2485b645dbcd4308dd65681303b350352b7 parent 69512cf677e30e0b4e4c753485ffe22d55ae1dc3 parent cf237d9685995eb12150ec6695f1446be2887f9c author Cure53 1719905084 +0200 committer GitHub 1719905084 +0200 Merge pull request #977 from cure53/dependabot/npm_and_yarn/multi-99ca4f73d8 build(deps): bump ws and socket.io-adapterjpOExRtree b32cb2485b645dbcd4308dd65681303b350352b7 parent 69512cf677e30e0b4e4c753485ffe22d55ae1dc3 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1719904067 +0000 committer GitHub 1719904067 +0000 build(deps): bump ws and socket.io-adapter Bumps [ws](https://github.com/websockets/ws) and [socket.io-adapter](https://github.com/socketio/socket.io-adapter). These dependencies needed to be updated together. Updates `ws` from 8.11.0 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](https://github.com/websockets/ws/compare/8.11.0...8.17.1) Updates `socket.io-adapter` from 2.5.2 to 2.5.5 - [Release notes](https://github.com/socketio/socket.io-adapter/releases) - [Changelog](https://github.com/socketio/socket.io-adapter/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io-adapter/compare/2.5.2...2.5.5) --- updated-dependencies: - dependency-name: ws dependency-type: indirect - dependency-name: socket.io-adapter dependency-type: indirect ... Signed-off-by: dependabot[bot] :txtree 77a6048eed23150c61d1f43a2936e67c868195ef parent 8070a8d8fd2cf8a0d79938c36a5005fd4b9c7158 author Mario Heiderich 1719321431 +0200 committer Mario Heiderich 1719321431 +0200 docs: Added better security warning about SAFE_FOR_XML to README T>xtree 4993dbe3dbf99dd2aa3d82ac3acfa571a082c55e parent 6e1e89260120c6cd698892167ea6891287c7922f author Mario Heiderich 1719316204 +0200 committer Mario Heiderich 1719316204 +0200 fix: Changed the order for attribute checks slightly for safer hooks *Xxgtree 51d05a92b57eba6f55465db2cb7731a0e18a618b parent 6d9fb36238a00ec3166203b1f81070cd776b5ea3 parent 36841a59974cd56a1d1a745d62daccd74afd7140 author Cure53 1718880220 +0200 committer GitHub 1718880220 +0200 Merge pull request #975 from cure53/dependabot/npm_and_yarn/multi-2d3aef8690 build(deps): bump ws and socket.iomxdtree aff6da7e0c62f6e2b69334f4ef968094a135ce40 parent 72c3e14294abcd4c6e06d898c123dc99fee8ff06 parent 8bc1ad9ea388b54acb4897344117bf7ab6d29d19 author Cure53 1718880149 +0200 committer GitHub 1718880149 +0200 Merge pull request #974 from Rotzbua/feat_website_lang feat(website): add lang attribute to declare languageAoxFtree 66b3401de1e0a7b69d74208d296c1d2ddb7db0e3 parent 194275a6656edda4973b0cd86b8b878a89984406 parent 437d76eb96a2fbd9d6a4e932062f5ea12dda04f9 author Cure53 1718880063 +0200 committer GitHub 1718880063 +0200 Merge pull request #973 from Rotzbua/fix_typos fix(typo): found by `codespell`cAxtree 3ffd1eea30eff7a32bd4e3f3c7f0b768c4e3d617 parent 3b79657b4000eba588f66d880ec50c81908d5424 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1718880007 +0000 committer GitHub 1718880007 +0000 build(deps): bump ws and socket.io Bumps [ws](https://github.com/websockets/ws) and [socket.io](https://github.com/socketio/socket.io). These dependencies needed to be updated together. Updates `ws` from 8.11.0 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](https://github.com/websockets/ws/compare/8.11.0...8.17.1) Updates `socket.io` from 4.6.1 to 4.7.5 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/4.6.1...4.7.5) --- updated-dependencies: - dependency-name: ws dependency-type: indirect - dependency-name: socket.io dependency-type: indirect ... Signed-off-by: dependabot[bot] ]bxVtree 3b9a83aff2aff534de4acb861835d8d27f67971f parent 3b79657b4000eba588f66d880ec50c81908d5424 parent 5e1eaec058f7e0f0542cdf5d47155c68d8134e28 author Cure53 1718879973 +0200 committer GitHub 1718879973 +0200 Merge pull request #972 from Rotzbua/feat_docs_removed_options feat(docs): add removed optionsixmtree 7b20169954105af2d6ec123bbf5348558bc8262f parent 87e94223275901042aa10d27808dc9280fe16b3d parent 3472d98c3f42528ae574a778ca4d8d58c618d960 author Cure53 1718879928 +0200 committer GitHub 1718879928 +0200 Merge pull request #970 from cure53/dependabot/npm_and_yarn/braces-3.0.3 build(deps): bump braces from 3.0.2 to 3.0.3lExtree 7cf616b84c0500a16f1b509085433ae01f6f1985 parent 87e94223275901042aa10d27808dc9280fe16b3d author Rotzbua 1718665419 +0200 committer Rotzbua 1718665419 +0200 fix(typo): found by `codespell` Qʞxtree 66d601b0ea798f32c128e124821a9a67efc78355 parent 87e94223275901042aa10d27808dc9280fe16b3d author Rotzbua 1718665140 +0200 committer Rotzbua 1718665140 +0200 feat(website): add lang attribute to declare language ]Yx8tree 41baa20902138330bca7810e2b9d61ce3c5a8ba3 parent 87e94223275901042aa10d27808dc9280fe16b3d author Rotzbua 1718664869 +0200 committer Rotzbua 1718664869 +0200 feat(docs): add removed options Make it easier to migrate from older versions. [ycn(xwtree 7b20169954105af2d6ec123bbf5348558bc8262f parent 87e94223275901042aa10d27808dc9280fe16b3d author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1718555722 +0000 committer GitHub 1718555722 +0000 build(deps): bump braces from 3.0.2 to 3.0.3 Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3) --- updated-dependencies: - dependency-name: braces dependency-type: indirect ... Signed-off-by: dependabot[bot] x tree 5c155eee12a25c11d3bcc84ab486f6752264a009 parent 25452235273cdd51c4b9c8c4e262271885e1a100 author Mario Heiderich 1717145538 +0200 committer Mario Heiderich 1717145538 +0200 chore: Preparing 3.1.5 release GԜx,tree 393f1d8959acc42f12db84b134ec93752e651e63 parent 6f5f87b82f5b75a71d931a17517f8d46a8e5d0d9 author Mario Heiderich 1716802132 +0200 committer Mario Heiderich 1716802132 +0200 chore: Experimentally removing the depth counter logic as we have better defenses now ^Kxtree 6138e5e08c01d2f03d36bcadcae30760a678b1df parent 2806f3b8f1d4df1609d5691ca5d2dff39ac663ff author Mario Heiderich 1716444222 +0200 committer Mario Heiderich 1716444222 +0200 see #961 fix: Fixed path to main file in bower.jsOx tree 4505bc86915a733be264850b69ad84c7f5f113c3 parent 8ccbc42d85cc80fbd393c2b0ef59e25819cf008a author Mario Heiderich 1716118772 +0200 committer Mario Heiderich 1716118772 +0200 chore: Preparing 3.1.4 release sIxtree e5579a6825976e2943e6555f5808fa9993ffda9b parent 273e17d791d716f313f41fa3056489b09446275c author Mario Heiderich 1716049747 +0200 committer Mario Heiderich 1716049747 +0200 test: Experimentally changed TEST_PROBE_ONLY to not cover 2.x sGRܑxAtree f072942ee2d2339577bcd5fb1d623bd338e51419 parent 52a58877b5005115a41e7be5490e5866f688a34d author Mario Heiderich 1716045572 +0200 committer Mario Heiderich 1716045572 +0200 fix: Added MSIE number check fix to main as well test: Experimentally added 2.x to branches for BS test on qbxJtree 2cca6dd5cd152ad951f403c39b6d9ef643f2cc48 parent 8ed346e28f8cecb4886a51d07899fc76b4b81828 parent eedd6d287d6114ffe1a10de993d4c014cb1addbf author Cure53 1716025732 +0200 committer GitHub 1716025732 +0200 Merge pull request #957 from Gigabyte5671/popover-api Allow Popover API attributeseӖx6tree bbe7938b9920327eb0e4e17b36e32cba12663db7 parent 0007ff60877e6eea7f42670210df7f74b70324ff parent f3aeb3dd607411c28f7efdefdf395cfea9c87559 author Cure53 1716025685 +0200 committer GitHub 1716025685 +0200 Merge pull request #956 from MortenHofft/patch-1 Documentationi^Ix tree 49cc68d62b17054afca62b8ad2fd8469be1dd45e parent 0007ff60877e6eea7f42670210df7f74b70324ff author Giga 1715986687 +1200 committer Giga 1715986687 +1200 Add popover attributes to allow list QdIx@tree bbe7938b9920327eb0e4e17b36e32cba12663db7 parent 0007ff60877e6eea7f42670210df7f74b70324ff author Morten Høfft <6759267+MortenHofft@users.noreply.github.com> 1715779919 +0200 committer GitHub 1715779919 +0200 documentation https://github.com/cure53/DOMPurify/issues/526#issuecomment-2112543369dx tree d97836f90dab485dcc2f7a389fd9e8d7dd779954 parent 2f842ce5acf97436d12d4bcf24bf3fb8ccd4296f author Mario Heiderich 1715421684 +0200 committer Mario Heiderich 1715421684 +0200 chore: Preparing 3.1.3 release LJ7xtree 5fada0f0ba99caa366f5d568ca29cb2808c962fc parent c165d182f31c22cd10c2afb431168ace2fe0f31b author Mario Heiderich 1715172466 +0200 committer Mario Heiderich 1715172466 +0200 fix: Added smaller-than-null check for __depth hardening code V+xtree 7a66372fe98b5fe375a1bef76a528a1a50914feb parent f24cc0c544e51662548f71f89e00c776d3ce99d6 author Mario Heiderich 1715168847 +0200 committer Mario Heiderich 1715168847 +0200 fix: Hardened the depth tracking code against prototype pollution Wxtree 96525ae46ca43907df77e301d8b4d15ce1d31cd8 parent d5aab1c07458ba9688644fff5798225a2f60e61c author Mario Heiderich 1715102341 +0200 committer Mario Heiderich 1715102341 +0200 fix: Made the regex for comment scrubbing a bit stricter #S#xtree 78a37bf5e58067d226922a83453302006f0282f4 parent c6d2d68bf6f0d5626dd7a8385c19684a75528374 author Mario Heiderich 1715087293 +0200 committer Mario Heiderich 1715087293 +0200 fix: Expanded the comment scrubbing regex matching a bit further #Txtree 31457f67a319ab9c14bd1f3349d00b89956c52bf parent 16bd84423a710b94ec321b6beba035fa7340f16e author Mario Heiderich 1715076370 +0200 committer Mario Heiderich 1715076370 +0200 fix: Added better configurability for new comment behavior ?TCxtree 338ef5633f662889145f8aea967ba070617c8cd5 parent a57da74d222c17b30f0764ddad6fb92b0a3256bf author Mario Heiderich 1714920717 +0200 committer Mario Heiderich 1714920717 +0200 docs: Changed inline comments slightly to be more accurate uTAxtree cadf63ba2c3bcf835343d9b6cfa6d993dd8a8714 parent ebf986d61546445c21bf9799d53116462bafbbf4 author Dr.-Ing. Mario Heiderich 1714911189 +0200 committer Dr.-Ing. Mario Heiderich 1714911189 +0200 test: Fixed the tests %LJx%tree c06fb93ec61c2c08fea069489a486f87285539fc parent d2a42956059875f8c5963b09e6ca9571c7c88906 author Dr.-Ing. Mario Heiderich 1714910886 +0200 committer Dr.-Ing. Mario Heiderich 1714910886 +0200 fix: Added experiemental comment scrubbing inside attributes cZZxtree 484586efbd691fe17af2013a7da76161d36e0921 parent 91ebf77a12efa87eaaefc1a061377fec6faa286c author Dr.-Ing. Mario Heiderich 1714909025 +0200 committer Dr.-Ing. Mario Heiderich 1714909025 +0200 fix #949 chore: Used lowercase for bower package name J&Wxctree 9c671ac2aad158e734f0c4ba44fc5c4184c297d8 parent f139b089a8fe87cb64c3ab1deacacd55499a7bcb parent b9d931b91da460d9e8fb29f6387e7a208e2ea6d0 author Cure53 1714908711 +0200 committer GitHub 1714908711 +0200 Merge pull request #948 from ssi02014/refac/purify refac: refactoring nodeType by adding a NODE_TYPE objectVmmxtree 9c671ac2aad158e734f0c4ba44fc5c4184c297d8 parent f139b089a8fe87cb64c3ab1deacacd55499a7bcb author ssi02014 1714745346 +0900 committer ssi02014 1714745346 +0900 refac: refactoring nodeType by adding a NODE_TYPE object NȖx&tree 39ebdaea1971d3eaf1162cc4bd0311def29b5d1a parent 0b6804733bd57148f34b8abb75f81f2978883420 author Dr.-Ing. Mario Heiderich 1714739648 +0200 committer Dr.-Ing. Mario Heiderich 1714739648 +0200 fix: Added experimental change to prohibit __depth clobbering Zx9tree 8c8d7a70fa15582c49406e65e26a4cb843128228 parent 940034c0a21059fb328efc6be18e3e51c3fa8998 parent 34be9b38a535d95964b3cc29636cdbbe29f48aa8 author Mario Heiderich 1714729307 +0200 committer Mario Heiderich 1714729307 +0200 Merge branch 'main' of github.com:cure53/DOMPurify t]]x tree ead3e71e64a757665dca3752c78d987c6efe070d parent bcbdb5121aad767018ae3152ad6379a049c0b6ab author Mario Heiderich 1714729258 +0200 committer Mario Heiderich 1714729258 +0200 fix: Added experimental clobbering check after removal Sxtree 724af2f71c0a00888b55e73ac85fce18d183ec2d parent bcbdb5121aad767018ae3152ad6379a049c0b6ab author Cure53 1714554168 +0200 committer GitHub 1714554168 +0200 Update README.md with latest shout outsvHxtree 7855975c72f373bdc555c2d2e4ff7b57d4036ce7 parent f69ee899755c8947038b60d9a5a7eb7842362c59 author Mario Heiderich 1714463759 +0200 committer Mario Heiderich 1714463759 +0200 chore: Updated package-lock.json with new release number [Sx tree 718ffba69203eee69429f07c915eed93f3e4b658 parent 1cf37cb9fd26e3ff2f483084c0892adbbdd9eca6 author Mario Heiderich 1714463056 +0200 committer Mario Heiderich 1714463056 +0200 chore: Preparing 3.1.2 release Jxtree c6922db66a893cd292a04837b195cb8b87e6e3b2 parent 7ba79de390c2b621010211d924e3964b309426b1 author Mario Heiderich 1714462445 +0200 committer Mario Heiderich 1714462445 +0200 test: Fixed the tests for older Chrome and Safari O]xPtree 287129e83be320eefb4d74474af7333c55c156a6 parent d0deeb961a3be6bd8609c89a3bcf48cfe9e4ffe1 author Mario Heiderich 1714402877 +0200 committer Mario Heiderich 1714402877 +0200 fix: Adjusted the list of permitted SVG HTML integration points test: Adjusted the tests to reflect the expected behavior .\l xtree c9b773ec9fd407a673738b6ce726412df090b540 parent d10a3971f4784dd5bf6066f10d389a357485066d author Mario Heiderich 1714205284 +0200 committer Mario Heiderich 1714205284 +0200 fix: Switched to using the getParentNode API for some calls %S xtree b47668048d34b52292324cb4a926a59cf3a6c898 parent f335040df902fcd2e6a7585051fa29e1f1576c49 author Mario Heiderich 1714130207 +0200 committer Mario Heiderich 1714130207 +0200 docs: Added new mentions of honor to the readme "LNx tree 1c09f0dc64b6cf167663c547f8f4bd490157fed1 parent 0cbc0c02a73cba717d20b80dde692eeb1fa5297c author Mario Heiderich 1714128181 +0200 committer Mario Heiderich 1714128181 +0200 chore: Preparing 3.1.1 release lIx9tree ba79c83ea3b3e0da1d1285db55604004e602e453 parent 785e81a723816a5a830688b0c36cd2249508853e parent 3d8bf31c5ba2e50dd20b66e8c03113a5edaebcda author Mario Heiderich 1714123105 +0200 committer Mario Heiderich 1714123105 +0200 Merge branch 'main' of github.com:cure53/DOMPurify ]x tree 6d252d029eb049463f804fced496d9c96c10dccf parent 43f31cf9126717afbf7407abc7674585268ff5b9 author Mario Heiderich 1714122536 +0200 committer Mario Heiderich 1714122536 +0200 fix: Set the MAX_NESTING_DEPTH to 255 for good measure and adjusted tests BWaxotree 6878b28e2c932414dbb04d0ac77b21f0f6918303 parent 43f31cf9126717afbf7407abc7674585268ff5b9 parent 0ead6c378e6dc6d22fe2157ac803348c2424584c author Cure53 1714053341 +0200 committer GitHub 1714053341 +0200 Merge pull request #942 from kyselberg/main docs(README.md): correct hook name in example and remove misleading commentpxtree 6878b28e2c932414dbb04d0ac77b21f0f6918303 parent 41b9080a59052d240a5d101d1d82a5200f7416d6 author Illia Kyselov 1714051854 +0300 committer Illia Kyselov 1714051854 +0300 docs: additional info in example Kxtree 38cfc9dee119828ebcec287ae87d8c678ee45375 parent 43f31cf9126717afbf7407abc7674585268ff5b9 author Illia Kyselov 1714051327 +0300 committer Illia Kyselov 1714051327 +0300 docs: correct hook name and remove misleading comment UUxtree 45b40514d3077f803b30e1a463bdee54f3100178 parent 531cf699c22dc503c232d99c5d56637c265084aa author Mario Heiderich 1714048627 +0200 committer Mario Heiderich 1714048627 +0200 chore: Re-generated dist versions #Ix|tree a7772b8ea89240edbc8bfbc1e30b15a3bf944241 parent 9c0e201f76876d22ef24d8852b69e6edb4cd63b6 parent d2b5d8d491168f1cdcdf0d567c4efc5617608823 author Cure53 1714034088 +0200 committer GitHub 1714034088 +0200 Merge pull request #941 from icesfont/fix/deep-nesting-mxss fix: added __removalCount to account for nodes removed from parents w…yxztree a7772b8ea89240edbc8bfbc1e30b15a3bf944241 parent 9c0e201f76876d22ef24d8852b69e6edb4cd63b6 author icesfont 1713990126 +0100 committer icesfont 1713990126 +0100 fix: added __removalCount to account for nodes removed from parents when calculating depth test: added more nesting-based mXSS tests and clobbering tests for __removalCount 9}xtree 00540e7b7f41d5539b215f118e35f413bd887481 parent c144ea858c0f50feb422c0efe9f84ef3d5bfb1ca author Mario Heiderich 1713978489 +0200 committer Mario Heiderich 1713978489 +0200 fix: Fixed a faulty edit and changed the code acccordingly T,xLtree 90f3fb57e61fef7bda536df98f46154b4ac81c72 parent 28ae48358d2a9a13739842afa809c2d74a24dde2 author Mario Heiderich 1713971212 +0200 committer Mario Heiderich 1713971212 +0200 fix: Added experimental __depth increment for copied elements test: Removed Firefox 60, added Firefox 125, Chrome 124 gȑxntree 72b5c8a6b6aa2d457b60636eff629070abde7ebf parent 8a97dd223917c7ec268a8adf612ee158bf01605a author Mario Heiderich 1713970253 +0200 committer Mario Heiderich 1713970253 +0200 fix: Added __depth tracking for ShadowDOM and template elements as well fix: Set MAX_NESTING_DEPTH to 500 for good mesaure test: Added more tests to cover template element depth tracking G ݕxtree f4fc73be7adcaf37344e82802e0ad656f886625a parent 989ee2edceaa74ebf4d3d61c10b9bb58980fa566 author Mario Heiderich 1713967408 +0200 committer Mario Heiderich 1713967408 +0200 fix: Slightly changed the execution order for __depth tracking W4xctree db66ec92f2208492e1239665a14b1f969cd3214c parent a85070faa4098dde1f98085945f8701f9438d261 author Mario Heiderich 1713965981 +0200 committer Mario Heiderich 1713965981 +0200 fix: Added __depth field to sanitized DOM nodes for better tracking test: Added tests to cover possible nesting-based mXSS on Blink & Webkit ox"tree 568d7384833d044065e5ff63ab0efae321aaf093 parent 5655e37e5acd08ba9f18be2a132af12ae7f9f286 author Mario Heiderich 1713889469 +0200 committer Mario Heiderich 1713889469 +0200 fix: Fixed an off-by-one with the nesting counter causing over-sanitization [-xtree 48183a87649f6761d1c73211164aca8289b3a8c6 parent 7821b479f217fc54fb6cf5733e0d43a159825054 author Mario Heiderich 1713886994 +0200 committer Mario Heiderich 1713886994 +0200 fix: Changed the behavior of the nesting counter ever so slightly (Uxxtree bfa64c8337e438edb20321f5af96a1da050e0613 parent 8c9872ca116f54be105e5231e08cb4255953bdc8 author Mario Heiderich 1713872662 +0200 committer Mario Heiderich 1713872662 +0200 fix: Addressed a possible bypass issue caused by deep-nesting [Ux%tree 72e4227ab5e9fc41292abd8196161b0692359b99 parent f51f12679dd9cd5441ee9aa43dba532edb24f121 author Mario Heiderich 1713249845 +0200 committer Mario Heiderich 1713249845 +0200 see #939 docs: Updated README to be more accurate for Trusted Types use cases Xɝxtree 64a6207cdeee21471173579982e12a6dfef06e30 parent 022a22c0721623b5fd846d82659ed8783dae6aae author Mario Heiderich 1712490980 +0200 committer Mario Heiderich 1712490980 +0200 docs: Updated the year in LICENSE file hK.xtree 7d8b4c429bffd1b1287bb18a27a91809ee130f95 parent b316ca4072b6502784cab8be124a77829e8b27a1 author Dr.-Ing. Mario Heiderich 1712419586 +0200 committer Dr.-Ing. Mario Heiderich 1712419586 +0200 chore: Preparing 3.1.0 release Mx1tree 08cf6b46ef929ea7c782699cabc647b0c98058f9 parent 6c076ff3d9a55e71ffc48a9b353460b19bfb45f7 author Dr.-Ing. Mario Heiderich 1712239753 +0200 committer Dr.-Ing. Mario Heiderich 1712239753 +0200 See #931 fix: fixed the CSS sanitizer demo hook, thanks @koosvanderkolk O]"x!tree 9b29abaf103fbea8c261fa439ad410e3666303fd parent be7ac6256d98a1822ce0119599577ce6c47add48 author Dr.-Ing. Mario Heiderich 1712163487 +0200 committer Dr.-Ing. Mario Heiderich 1712163487 +0200 fix: Changed the SAFE_FOR_XML config assignment slightly Xx+tree f2847da4aad0e5ee4adc3d0a6645399d192d3b08 parent cbea0ac1a7519086730d4241cc7e28e3585c1aad author Dr.-Ing. Mario Heiderich 1712162198 +0200 committer Dr.-Ing. Mario Heiderich 1712162198 +0200 docs: Modified the README slightly regarding the happy-dom warning \/x^tree cde341b04fdddf073024a45e9946493786ea63ba parent def46f95e7dd0f83d732036c2b3104ddf31c9f0c author Dr.-Ing. Mario Heiderich 1712161996 +0200 committer Dr.-Ing. Mario Heiderich 1712161996 +0200 feature: Added new config option to control comment sanitization docs: Added config flag description to README docs: Added warning about happy-dom being unsafe with DOMPurify to README >H"xtree 60d953d93a4effe170b04dabccbfa3f5a2e7c06c parent 02bb4badab1f3218d997325b58201d9cec21d815 author Mario Heiderich 1711475657 +0100 committer Mario Heiderich 1711475657 +0100 fix: Removed the unnecessary clobbering check for elm.data gUpx-tree 524ca503181e6d376148db47ee5d0df90c6004ca parent 7d18f5d30e96eda8a53dde42dbc17856d2b30c27 author Mario Heiderich 1711474448 +0100 committer Mario Heiderich 1711474448 +0100 fix: Rolling back changes from previous fixes, trying more aggressive comment handling a_`xtree af49fb32d6805e68d8b0e54bff64c7b169609648 parent 52a182c68f85ccd1db967fe3f0ad032f3d1878a0 author Mario Heiderich 1711471199 +0100 committer Mario Heiderich 1711471199 +0100 fix: Enhanced the fix for comments inside XML ?Oxtree 215e5dd97aefa30f023b20443878eaa59928ca7f parent a97058b7c56c83d86985fc42a3185c09ca6b79a0 author Mario Heiderich 1711458994 +0100 committer Mario Heiderich 1711458994 +0100 fix: Added an experimental fix to treat unwanted XML comment behavior '9Wx:tree 8d90c90393b46f06d98a902ce252462ebf027769 parent 3e39e78c4e850c748b7984ae2c1fccb51a638cb5 parent 2c754337905b4d698fd7908634e6d861b318534c author Cure53 1711445742 +0100 committer GitHub 1711445742 +0100 Merge pull request #926 from HaluanUskoa/fix/attrs Update attrs.js]x[tree 8d90c90393b46f06d98a902ce252462ebf027769 parent 3e39e78c4e850c748b7984ae2c1fccb51a638cb5 author HaluanUskoa <152920040+HaluanUskoa@users.noreply.github.com> 1711390265 -0700 committer GitHub 1711390265 -0700 Update attrs.js Add the `wrap` HTML attribute per issue [#925](https://github.com/cure53/DOMPurify/issues/925).{lfx tree eb722fc8731128c3684016221e7716cf0fd6d665 parent ab6b3bf9ee8616fc7bbb6fdafdeebb17805473af author Mario Heiderich 1711016096 +0100 committer Mario Heiderich 1711016096 +0100 chore: Preparing 3.0.11 release Ixtree f2f457d949ceffafa77f2061de68304d3415c8a0 parent dafca2ba393374012404ba92cf42f275fcb0a803 author Mario Heiderich 1711004741 +0100 committer Mario Heiderich 1711004741 +0100 fix: Made the NodeFilter see CDATA sections as well, thanks @Ry0taK &VxQtree 689006ef17cad0f7d92314b1d4c8b522c173a366 parent bc4158203580a7f03f41d994239e2536b3b56381 author Mario Heiderich 1710934673 +0100 committer Mario Heiderich 1710934673 +0100 fix: Addressed a conditional bypass pattern spotted by @Ry0taK fix: Addressed a conditional ReDoS issue spotted by @Ry0taK iYx tree cdae80b87d7d976d00d1bb6dbc20cdf704d838e7 parent 12098515ec17555682cb248a7e5df70fe1cb16d6 author Mario Heiderich 1710845836 +0100 committer Mario Heiderich 1710845836 +0100 chore: Preparing 3.0.10 release Ixwtree f9b94d6f3be34fbdf04e017c223ce600b6c331d2 parent 5d6c24f487c8564fdebd03866a333c342f943b35 parent e66c79d7bc7b52368ae6080a14d582152d703ded author Cure53 1710694233 +0100 committer GitHub 1710694233 +0100 Merge pull request #915 from cure53/dependabot/npm_and_yarn/follow-redirects-1.15.6 build(deps-dev): bump follow-redirects from 1.15.4 to 1.15.6|}x-x)tree f9b94d6f3be34fbdf04e017c223ce600b6c331d2 parent 5d6c24f487c8564fdebd03866a333c342f943b35 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1710628890 +0000 committer GitHub 1710628890 +0000 build(deps-dev): bump follow-redirects from 1.15.4 to 1.15.6 Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.4 to 1.15.6. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.4...v1.15.6) --- updated-dependencies: - dependency-name: follow-redirects dependency-type: indirect ... Signed-off-by: dependabot[bot] hx/tree 8210f7322bdd337c4c925fb2c478b0cd74636cbc parent 09b508bc3a44a87ee2f2bda519cfc5e259ade3e5 author Dr.-Ing. Mario Heiderich 1709543694 +0100 committer Dr.-Ing. Mario Heiderich 1709543694 +0100 fix: added a fix to handle invalid HTML Custom Element tagNames better r]x$tree 7a545de6d5e866afed5835af4e77c756d4e14b32 parent 573b0b364a051fe63ce7119378039847f3a6ff69 author Mario Heiderich 1709484823 +0100 committer Mario Heiderich 1709484823 +0100 fix: Fixed a possible issue with XML processing instructions deployed in HTML Z—xtree 2596ad8ee50aa16c5ca6c9a49e54f9013b754071 parent 741e91a20684864a0e141b2513bd4645f6817ca1 author Dr.-Ing. Mario Heiderich 1708438425 +0100 committer Dr.-Ing. Mario Heiderich 1708438425 +0100 chore: Preparing 3.0.9 release .LxXtree dd1c5e33b12d00d7140efa9a60d3ff3e2a4f3f42 parent f72d207e4ccede74b4e59f64de31bea44dadefda parent 0891f3b86e9e9e8a90b692887bd23db2a3b03fbe author Cure53 1708343000 +0100 committer GitHub 1708343000 +0100 Merge pull request #910 from ssi02014/fix/purify fix: Change the "in" operator to hasOwnProperty/jٞxtree dd1c5e33b12d00d7140efa9a60d3ff3e2a4f3f42 parent f72d207e4ccede74b4e59f64de31bea44dadefda author ssi02014 1708016829 +0900 committer ssi02014 1708016829 +0900 fix: Change the "in" operator to hasOwnProperty Lx&tree a33fee6797236cae7fcc67069ce559e45b8f2e77 parent fd4d4038497903895258d5d4ca75a9331280116a author Mario Heiderich 1707749491 +0100 committer Mario Heiderich 1707749491 +0100 fix: Fixed an unintended bypass when *-* is allowed for CEs, thanks @kevin-mizu 61Yxmtree 944f719882b0831692bb9689da866295ae33b4c3 parent 005a29e9b222f693bfc92733a2a2eafbbaaf1e2c parent 09ed903878e08c58c89f0c2ab22023f18ae8c8ec author Cure53 1706597338 +0100 committer GitHub 1706597338 +0100 Merge pull request #908 from ssi02014/fix/utils fix(utils): Fixed getOwnPropertyDescriptor to hasOwnProperty functionYqxtree 944f719882b0831692bb9689da866295ae33b4c3 parent 4a982d35d96858feca2ce12b06e4b1bd90ffa970 author ssi02014 1706554955 +0900 committer ssi02014 1706554955 +0900 refac(utils): Refactoring objectHasOwnProperty J՗xtree 796c70d81eddf4a061dd9e59dc4893620e313ef0 parent bb7a4d0c09f2e2d37e8390e0b8d0998c6023c3d8 author ssi02014 1706550394 +0900 committer ssi02014 1706550394 +0900 fix(utils): fixed isPropertyExist naming xHxtree 60553e23c802fc027fa5013478401958c54710f3 parent a5efad25c00ee0d620b5570b4c08ab57b57408aa author ssi02014 1706549951 +0900 committer ssi02014 1706549951 +0900 fix(utils): fix naming .@xtree c0d526611177791ff90fd55994c36597f1f275a3 parent 005a29e9b222f693bfc92733a2a2eafbbaaf1e2c author ssi02014 1706547596 +0900 committer ssi02014 1706547596 +0900 fix(utils): Modify getOwnPropertyDescriptor to hasOwnProperty prototype function X x(tree d1e2e7adf121d51b4fe283b5c870b4b8d8525af0 parent 8c76f06a0f17e09ee6ac32f32c6d507c19a299ac author Cure53 1705746826 +0100 committer GitHub 1705746826 +0100 Update README.md@?pxYtree 0788da712d3f10a6f0724b421ee1e920ce099858 parent 6023524787c9b4773b46905c93cb2c7b4bf06b2a parent 9863ed67252a7690f34fcf6905d5391473311de6 author Cure53 1705584889 +0100 committer GitHub 1705584889 +0100 Merge pull request #903 from HugoPoi/patch-2 console warn fallback for when run with Happydomygxrtree 0788da712d3f10a6f0724b421ee1e920ce099858 parent 6023524787c9b4773b46905c93cb2c7b4bf06b2a author Hugo Poissonnet 1705489292 +0100 committer HugoPoi 1705584440 +0100 fix: console warn removed console.warn(element) is displaying a lot stuff, in some context like HappyDom this display a lot stuff because a recursive console output of the entire Dom. Ꙃ/x tree 8a580a23a3e6c01d16eff9dfd8f546dd54bf6d0c parent 4018ebb96860d431cf7f32567607e23e68d58c97 author Mario Heiderich 1705327165 +0100 committer Mario Heiderich 1705327165 +0100 chore: Modernized most of the demos to use actual ES6 =Qޟxtree 65f3f990e402c9d50022721053d54ed6605893cd parent 6b8362c138809eb02279b35213c96fc919efdaf1 author Mario Heiderich 1705321655 +0100 committer Mario Heiderich 1705321655 +0100 fix: Updated the CSS sanitizer hook demo, thanks @Steb95 )Q'xwtree 1316783883a0f2efffc84623f3ea91b14e681f1b parent a15893f39fcaafe0574f3a36666de94bb12660b5 parent f957d275a6067cb0f14b0292e9d6cc4bcc1a6c4a author Cure53 1704822441 +0100 committer GitHub 1704822441 +0100 Merge pull request #901 from cure53/dependabot/npm_and_yarn/follow-redirects-1.15.4 build(deps-dev): bump follow-redirects from 1.14.8 to 1.15.4Gxp-x)tree 1316783883a0f2efffc84623f3ea91b14e681f1b parent a15893f39fcaafe0574f3a36666de94bb12660b5 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1704821223 +0000 committer GitHub 1704821223 +0000 build(deps-dev): bump follow-redirects from 1.14.8 to 1.15.4 Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.8 to 1.15.4. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.14.8...v1.15.4) --- updated-dependencies: - dependency-name: follow-redirects dependency-type: indirect ... Signed-off-by: dependabot[bot] eX3x tree a22cdf37ce29fc14975abedec989b9d082217164 parent fee00819cef6a71152a21dc15de5bab0b611771f author Mario Heiderich 1704472612 +0100 committer Mario Heiderich 1704472612 +0100 chore: Preparing 3.0.8 release gIxotree c0234ed6ce00655b9202f5169f0ec236639a2fe0 parent d5f7e7769d793171dea1b2afec033c31ac24307c parent 1569eb856b4d7490edd0fef443f10ee56dbed42a author Cure53 1704444107 +0100 committer GitHub 1704444107 +0100 Merge pull request #898 from cpmotion/issue-897 fix: Avoid TypeError for null values on CUSTOM_ELEMENT_HANDLING config.p0xItree c0234ed6ce00655b9202f5169f0ec236639a2fe0 parent d5f7e7769d793171dea1b2afec033c31ac24307c author Williamson, Matthew 1704413140 -0500 committer Williamson, Matthew 1704417279 -0500 fix: Avoid TypeError for null values on CUSTOM_ELEMENT_HANDLING config. ISSUE-897 fxWtree 236cbd839432ee55407a6707f2acbaf6a3760512 parent f44cba8d836616244915c91032919baeabc39e5a parent 3e88f0d5acd7c3e379ecb20a03c640859a3ae0f5 author Cure53 1704387851 +0100 committer GitHub 1704387851 +0100 Merge pull request #896 from ssi02014/revert/conditionalExports fix: revert conditional exportskixtree 236cbd839432ee55407a6707f2acbaf6a3760512 parent f44cba8d836616244915c91032919baeabc39e5a author ssi02014 1704387256 +0900 committer ssi02014 1704387256 +0900 fix: revert conditional exports j^E&x tree 7529c7bf4ad87fa8d480bf93904bbeb2827424f1 parent 7edfef14206e62a828bc84333ef9e549e66d43d3 author Mario Heiderich 1704282861 +0100 committer Mario Heiderich 1704282861 +0100 chore: Preparing 3.0.7 release I.xtree d30ba37e192252d26d09cca7bbd6ec013fd7fb55 parent afe81f6f75d3b3e9a3411e6fbeb4cdcaae40f526 parent bfb4986e2ab06e976b9996fcfd481598e1d89064 author Cure53 1702993374 +0100 committer GitHub 1702993374 +0100 Merge pull request #890 from cure53/dependabot/github_actions/github/codeql-action-3 build(deps): bump github/codeql-action from 2 to 3y$1xtree d30ba37e192252d26d09cca7bbd6ec013fd7fb55 parent afe81f6f75d3b3e9a3411e6fbeb4cdcaae40f526 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1702939042 +0000 committer GitHub 1702939042 +0000 build(deps): bump github/codeql-action from 2 to 3 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v2...v3) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] s+xtree fa4fe748392e7c2f44d7f4ab285d80257ed56b32 parent 37969e724c937d64b5c7275b36eca06764e212d8 author Mario Heiderich 1702634907 +0100 committer Mario Heiderich 1702634907 +0100 chore: mapped Node 21 to browserstack testing Nxtree 01c5ed06af66c9784d11ed38780e4281c20037b0 parent c005234550c39a80d04bfcafc8bcbb0894de709f author Mario Heiderich 1702630267 +0100 committer Mario Heiderich 1702630267 +0100 chore: added newer node releases to test suite z[Oxtree e2cf0c93093fddf610d8eb733d650f6015380956 parent 4523d6c0ad9f90982d19dea725badb0caa9f2e3b author Mario Heiderich 1702629671 +0100 committer Mario Heiderich 1702629671 +0100 chore: extended browser test array with latest versions Tcxtree a1cfad4b2bb8f058d27d7b3e01ab67db95c1c7de parent ed22793b87872d6e7ffa3924a55379ca1ccb3b76 author Mario Heiderich 1702464825 +0100 committer Mario Heiderich 1702464825 +0100 see #881 chore: removed experimental uponRemove hooks again @pU{xtree 41c3faa6d5a5e285ff92d4a93c1b6e67fe4ee680 parent fd0f0cf92db46fd3585c82ec8447579c8afb6678 author Mario Heiderich 1702368168 +0100 committer Mario Heiderich 1702368168 +0100 see #881 feature: added hooks to element and attribute removal Uxtree d43636c701ef5402a6eddd762df104955cfbfe52 parent 285ffe0451343af4e2477f71391fe5d002d2f9b0 author Mario Heiderich 1701853889 +0100 committer Mario Heiderich 1701853955 +0100 fix: added better protection against CSPP, thanks @Kevin-Mizu ^T x(tree 798c60fecbf38afd145d964aa273a903aafbabd2 parent a2287d48a97578589be9cb854ac360586c6970af author Cure53 1700465925 +0100 committer GitHub 1700465925 +0100 Update README.mdZ?XxRtree 7245485f64782d6ac50e0a1d2c2e0da96f568d75 parent 32b8f4f5ff218a379204ef0729c73ad08687ef03 parent 85bd1356ab532e1b49757b7a3e2500de9aba6044 author Cure53 1699541949 +0100 committer GitHub 1699541949 +0100 Merge pull request #874 from ssi02014/chore/package chore: packagejson conditional exportsf̜xtree 7245485f64782d6ac50e0a1d2c2e0da96f568d75 parent 9ab05720391de3574c87524c1b5b8213e7113214 author ssi02014 1699540857 +0900 committer ssi02014 1699540857 +0900 revert: commit-amend-build.sh UC!x tree 47289a6640908b6686a7122640b8a3d89aa33ce0 parent 32b8f4f5ff218a379204ef0729c73ad08687ef03 author ssi02014 1699540302 +0900 committer ssi02014 1699540302 +0900 chore: packagejson conditional exports G1x7tree 485313c18be86872782126afde431a2c62efb7c1 parent 97d2428bd7c747e02de05125b1aa25ea86559500 parent e8382acc4e9b79efb7f5ea8e361c0b02a69142dc author Cure53 1699279446 +0100 committer GitHub 1699279446 +0100 Merge pull request #872 from nanase/fix-typo Fix typo in README\xtree 485313c18be86872782126afde431a2c62efb7c1 parent 97d2428bd7c747e02de05125b1aa25ea86559500 author Nanase 1699253087 +0900 committer Nanase 1699253087 +0900 Fix typo in README DK xVtree a21ddf58eda604df65b225b267dc505c0e6018b8 parent 6432925bfee9c65b1d27218f4f5e7a30a5147c11 parent 4b8b8a98994f4b884057e68f5e8ada6b2c41a94f author Cure53 1698834009 +0100 committer GitHub 1698834009 +0100 Merge pull request #870 from ssi02014/chore/build chore: modify package.json and rollup.config$3hfxtree a21ddf58eda604df65b225b267dc505c0e6018b8 parent da842edb71e8d80457642389f04695e2593ffde1 author ssi02014 1698820201 +0900 committer ssi02014 1698820201 +0900 chore: modify package.json and rollup.config zIxtree 071b8d22c72fb026268c1eb5e5d6ba043ebd4918 parent 0a778bc15807e8e4a1ea6b6e3004ac08add89aa5 author ssi02014 1698817205 +0900 committer ssi02014 1698817205 +0900 chore: add package.json individual build commands &L@xtree 689bc0df5c296edc40248ac4a0c9c966ed52f220 parent 6432925bfee9c65b1d27218f4f5e7a30a5147c11 author ssi02014 1698801429 +0900 committer ssi02014 1698801712 +0900 chore: modify package.json and ollup.config .{I|xUtree 6281a52877d6ee0994cf2e904573baf7af3851c6 parent 6ae3f031345d2f911ebf7d5f54b4e6eae4b847c2 parent 82725cc8a8ae809721799e07edacdb7bd7d90ff5 author Cure53 1698480729 +0200 committer GitHub 1698480729 +0200 Merge pull request #867 from ssi02014/refac/purify refac: remove and improve unnecessary code?0ixtree 6281a52877d6ee0994cf2e904573baf7af3851c6 parent 6ae3f031345d2f911ebf7d5f54b4e6eae4b847c2 author ssi02014 1698431409 +0900 committer ssi02014 1698431409 +0900 refac: remove and improve unnecessary code Ix{tree 9b08747a5ec8a90865c8da826686c4e6ede3c411 parent c5ada7ef7a6d1add7f4ba5d3cf9477c3584bfa77 parent f97827e2fe792a256bdbcdb372afdbeaa520658d author Cure53 1698237917 +0200 committer GitHub 1698237917 +0200 Merge pull request #866 from cure53/dependabot/github_actions/actions/setup-node-4 build(deps): bump actions/setup-node from 3 to 4x,x>tree 9b08747a5ec8a90865c8da826686c4e6ede3c411 parent c5ada7ef7a6d1add7f4ba5d3cf9477c3584bfa77 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1698101031 +0000 committer GitHub 1698101031 +0000 build(deps): bump actions/setup-node from 3 to 4 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] ~fxztree 247de4b1e5e370cf063e70bed0d74f8ffcbbb14b parent 361a77cd9480afa2133bae314b85809c42df0a02 parent 7998a47d149170e72c3d47bd3022d06960f53db2 author Cure53 1697714049 +0200 committer GitHub 1697714049 +0200 Merge pull request #864 from cure53/dependabot/npm_and_yarn/babel/traverse-7.23.2 build(deps-dev): bump @babel/traverse from 7.17.3 to 7.23.26v0xtree 247de4b1e5e370cf063e70bed0d74f8ffcbbb14b parent 361a77cd9480afa2133bae314b85809c42df0a02 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1697576370 +0000 committer GitHub 1697576370 +0000 build(deps-dev): bump @babel/traverse from 7.17.3 to 7.23.2 Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.17.3 to 7.23.2. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.23.2/packages/babel-traverse) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-type: indirect ... Signed-off-by: dependabot[bot] x tree 4df082631a8764786f1aaf9e739f13bd0947ceed parent d9f58ef9232a9c482a1514afe759f463d0e6d036 author Mario Heiderich 1695888743 +0200 committer Mario Heiderich 1695888743 +0200 chore: Preparing 3.0.6 release I)xtree e766121dc4f8ba321d83cd8a2c76f82167884516 parent 5f89481c6436dba051762142f9f3bc2a79186a9c author Cure53 1695888073 +0200 committer GitHub 1695888073 +0200 Update README.md docs: fixed the badge label colorsnJax tree 9e367fa48a7e4a72227a08acdbb3c38c943e669f parent 3c3f0cf098f1e3f7acfd9b8b19cbb6ad0e47f3a1 author Cure53 1695832006 +0200 committer GitHub 1695832006 +0200 Update README.md docs: changed badge labelsԯIxtree ada6355d2e24054b85a22625b0974dcae672eb7b parent ffa3923767d96284795bff068091bbb776630bf4 author Cure53 1695830251 +0200 committer GitHub 1695830251 +0200 Update README.md docs: fixed two broken README badgesfJxwtree 03196a77ffbdffc540c5d3c70ff87f8f02bb7032 parent 76eed0d7605b5b51dd8f5a4c0c4495689d987bb4 parent aabfbe8344833836546ec2aaa2d10726cfd57c2d author Cure53 1693894754 +0200 committer GitHub 1693894754 +0200 Merge pull request #855 from cure53/dependabot/github_actions/actions/checkout-4 build(deps): bump actions/checkout from 3 to 4Bu/xtree 03196a77ffbdffc540c5d3c70ff87f8f02bb7032 parent 76eed0d7605b5b51dd8f5a4c0c4495689d987bb4 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1693865983 +0000 committer GitHub 1693865983 +0000 build(deps): bump actions/checkout from 3 to 4 Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] xtree 9eb9a58894d76c79d48614987744d2762397e1b1 parent 944bb56ddb2d055f9eedc5ead7df1eadd1aa460b author Cure53 1693316365 +0200 committer GitHub 1693316365 +0200 docs: Fixed a faulty sanitization result in README See #854:N;xQtree bc5ddd7bb1b18b4aeab03767ef65f01cb4a702d3 parent d017d4a6555c198881638363a6e89bc40c315755 parent a7f96826703d550d3408c6cf0b2bfab7c70895d4 author Cure53 1691760580 +0200 committer GitHub 1691760580 +0200 Merge pull request #850 from ssi02014/fix/createIterator fix(purify): fix _createIteratorfxtree bc5ddd7bb1b18b4aeab03767ef65f01cb4a702d3 parent a05f787cdcd460fc7f70176fd1f670d9e2d30537 author ssi02014 1691699014 +0900 committer ssi02014 1691699014 +0900 refac(purify): Rename _isBasicCustomElement !Jxtree 394e42cc981eb48fc1e7ebca81ed00d71196dde7 parent 918493badfbb93780521bb3b75115d44633b1a42 author ssi02014 1691697940 +0900 committer ssi02014 1691697940 +0900 refac(purify): Rename _isBasicCustomElementCheck =Kxtree f77a2e0ebad5f3d100c5218f2368385473ee2738 parent 492e55cb98a53629fe4b1a80dedf765697146de8 author ssi02014 1691697543 +0900 committer ssi02014 1691697543 +0900 fix(purify): fix test error kC?xtree c6827894428cfca2d54757274aaae553ba3d04b1 parent a7da61a4d0e79d2d34998b8b39b6d9ce773eda85 author ssi02014 1691694489 +0900 committer ssi02014 1691694489 +0900 fix(purify): fix createIterator Extree 890c7ae2e7679bd6b9641f24669137865dbaf065 parent d017d4a6555c198881638363a6e89bc40c315755 author ssi02014 1691693362 +0900 committer ssi02014 1691693362 +0900 fix(purify): fix createIterator Cԕxtree 5acd10550b49d8bab3eee8955dd63140e992f5c7 parent d8a5d0cd8474c46ce41c36636bbf108197aed3a2 author Cure53 1691655503 +0200 committer GitHub 1691655503 +0200 docs: updated contributor listyExLtree 01cd91b6f5b04cfea573281b29231bc45b4f79c1 parent abe7c63e674663c9a4449fe51186256bdb839a3a parent 25ec541cec5101d2f0d5d9e62bd8a93d240bb418 author Cure53 1691655279 +0200 committer GitHub 1691655279 +0200 Merge pull request #849 from ssi02014/refac/purify refac(purify): Refactoring purify3Yextree 01cd91b6f5b04cfea573281b29231bc45b4f79c1 parent abe7c63e674663c9a4449fe51186256bdb839a3a author ssi02014 1691593508 +0900 committer ssi02014 1691593508 +0900 refac(purify): Refactoring purify TkEx`tree f36ce3e5101e4ba6bd86d87674007f83c281b7f4 parent ce799de4672134f498c1724b240efc635db38447 parent a3edcc52355860365e19410d4c67ce49922e145f author Cure53 1691579170 +0200 committer GitHub 1691579170 +0200 Merge pull request #848 from ssi02014/fix/purify fix(purify): Remove unnecessary conditional expressionsKlxtree f36ce3e5101e4ba6bd86d87674007f83c281b7f4 parent ce799de4672134f498c1724b240efc635db38447 author ssi02014 1691577248 +0900 committer ssi02014 1691577248 +0900 fix(purify): Remove unnecessary conditional expressions l5NlxJtree 49a0bb3ec997ba1fd76ae1319a7cd588a32b58f1 parent 6cf6801ee548d94cc03398c335396506b72235c8 parent 772326aa793fe31f20909d2b1125dfa22e737f52 author Cure53 1691324487 +0200 committer GitHub 1691324487 +0200 Merge pull request #845 from ssi02014/fix/purify fix(purify): Fix _isNode Functionbxtree 49a0bb3ec997ba1fd76ae1319a7cd588a32b58f1 parent e34c0a6b4e93b17fe1d2edbfed72f607986dfe9d author ssi02014 1691173420 +0900 committer ssi02014 1691173420 +0900 revert(purify): revert isNode Functio Name Jx tree b7a0010f4ab08bb76d3b600f2d4ad9ab51d3a239 parent 3d38e10b8a7e7b7e63e927c712d6c8ce535be1e3 author ssi02014 1691172324 +0900 committer ssi02014 1691172324 +0900 refac(purify): Initialize content null %HWxtree c091c2efd61dbef1723c00848910dc64a0af426e parent 28cc2297d63b8e5fdbbad9fde50b62311a8623dc author ssi02014 1691171691 +0900 committer ssi02014 1691171691 +0900 fix(purify): Fix _isNode function Fgxtree 611c75c870f184503c126cc2dfc6c2d7a6e598c3 parent d11de16058b1c3b65e0d61d708f864f4ba9ccffe author ssi02014 1691170243 +0900 committer ssi02014 1691170243 +0900 fix(purify): Fix _isNode function |F x tree aee78bb0cfb05b53429aadcf9da561e3592508bf parent 6cf6801ee548d94cc03398c335396506b72235c8 author ssi02014 1691167302 +0900 committer ssi02014 1691167302 +0900 fix(purify): Fix _isDOMNode function OFjxHtree ef523e6fecc486440ec8515b388667bf67d2e60e parent 4560b45efcd9022fdf246b70c4c260262c7a856f parent 54f631320e1c9802e47adab8087b270732bdccf3 author Cure53 1691142311 +0200 committer GitHub 1691142311 +0200 Merge pull request #844 from ssi02014/docs/purify docs(purify): Update README.mdIUa՝xtree ef523e6fecc486440ec8515b388667bf67d2e60e parent 7e5a36ef260a65daa45ab8a4eee67a80758265e7 author ssi02014 1691130400 +0900 committer ssi02014 1691130400 +0900 docs(purify): Update README.md Cxtree 8aee932359832727b12f993c422b584a4e5669bf parent 3a88d78315a2dd3411d163dbc31c7a6a197a5ce0 author ssi02014 1691130009 +0900 committer ssi02014 1691130009 +0900 docs(purify): Update README.md Bxtree ef836cc8ad513900774081e7c27bf3ca4145a47e parent 4560b45efcd9022fdf246b70c4c260262c7a856f author ssi02014 1691129922 +0900 committer ssi02014 1691129964 +0900 docs(purify): Update README.md N&Caxbtree 14f52ceb14b54e89197db55bae64b6b3c825e4b3 parent ea9793f445bd2e40bef0da82b960e06e41398df2 parent 539ffcfaadc1d62aa610b2545725d58fabedd219 author Cure53 1691097210 +0200 committer GitHub 1691097210 +0200 Merge pull request #843 from ssi02014/refac/purify refac(purify): Add utils jsdoc & code consistency tasksI9m~xtree 14f52ceb14b54e89197db55bae64b6b3c825e4b3 parent f17875645edfdead1270e87ed2321a4c6b255c55 author ssi02014 1691083011 +0900 committer ssi02014 1691083011 +0900 fix(purify): fix comment &Bxtree 8be28dd9f89a93ede7f257ebd9701d1a6f476725 parent 7b5827029f9f83d260fc37e647d34e6b213d1e2e author ssi02014 1691081902 +0900 committer ssi02014 1691081902 +0900 fix(purify): revert comment ޝC̖xtree 3f8385ab4489d38bb8ad90570e5af63fe6c817a8 parent ea9793f445bd2e40bef0da82b960e06e41398df2 author ssi02014 1691080535 +0900 committer ssi02014 1691080535 +0900 refac(purify): Add utils jsdoc & code consistency tasks Mґxtree 23d3625767e3f5ae39abdac9661eba70dcba6620 parent 44b842e2aceabe3720d27f5c9e75ada47f748328 author Cure53 1691064313 +0200 committer GitHub 1691064313 +0200 Update README.md docs: Updated list of contributors againuN~xtree 524efbef9289ec123ae0a68088041bba15dbe228 parent f39437992c16fbcb082705424019c0118886b0d0 author Cure53 1691059263 +0200 committer GitHub 1691059263 +0200 Update README.md docs: Updated contributors list"IxLtree dd6f5966c9fc91e4eff5edc7937f086ab4f749bc parent 144863ba011b750e9a59c697df028e885fa20679 parent 4dd61cdf709ecce555f378e8860e78c01204aac2 author Cure53 1691056183 +0200 committer GitHub 1691056183 +0200 Merge pull request #842 from ssi02014/refac/purify refac(purify): Refactoring Purify#eCxtree dd6f5966c9fc91e4eff5edc7937f086ab4f749bc parent c566607dc71a41274df8586f8dd3897f295147ed author ssi02014 1691008184 +0900 committer ssi02014 1691008184 +0900 refac(purify): Refactoring Purify `Fnxtree 05cd07624fc91d1c5a1a1c5510f38ba3d8189720 parent 29f8211a90f5b5f83b5c7b31237a619e9eb191ff author ssi02014 1691006398 +0900 committer ssi02014 1691006398 +0900 refac(purify): Refactoring Purify Eaxtree a00c068e69581d34553794e6e0f76be2cc4c76c0 parent 144863ba011b750e9a59c697df028e885fa20679 author ssi02014 1691005607 +0900 committer ssi02014 1691005607 +0900 refac(purify): Refactoring Purify xDxwtree 3f371ff6e59f2dee1328767ff049930098368402 parent 4ac184e6316ef329b91295125c90c338131f6f77 parent f5c3c9895350f71cf21b358835f4beade4cff6c5 author Cure53 1689767080 +0200 committer GitHub 1689767080 +0200 Merge pull request #839 from cure53/dependabot/npm_and_yarn/word-wrap-1.2.4 build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4p)xdtree 3f371ff6e59f2dee1328767ff049930098368402 parent 4ac184e6316ef329b91295125c90c338131f6f77 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1689727580 +0000 committer GitHub 1689727580 +0000 build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4 Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4. - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4) --- updated-dependencies: - dependency-name: word-wrap dependency-type: indirect ... Signed-off-by: dependabot[bot] 8xtree a759fa1315595708e6f70843f3f67ecbf4509ae2 parent 6e22dcea9fc37b347bc53bbfacb307611f508476 author Mario Heiderich 1689061835 +0200 committer Mario Heiderich 1689061835 +0200 chore: Updated build dependencies Kjxtree 68a8974eda7520ef9868d5cc2537591f5fcca675 parent 2e8075ef91867d23b87b4301ea9b2d6752bc139a author Mario Heiderich 1689061766 +0200 committer Mario Heiderich 1689061766 +0200 chore: Preparing 3.0.5 release legal: Fixed a license issue with APL 2.0 ّVjxytree ba4af411e2021a399bc6689e5a969fa02fcd4dd6 parent 20909061507fcf75823551f8a6b8e0bcc7fb2679 parent 1a90f8c6202fe65dae1a751759e2c0747b0472c2 author Cure53 1688910690 +0200 committer GitHub 1688910690 +0200 Merge pull request #833 from cure53/dependabot/npm_and_yarn/tough-cookie-4.1.3 build(deps): bump tough-cookie from 4.0.0 to 4.1.3rY/x tree ba4af411e2021a399bc6689e5a969fa02fcd4dd6 parent 20909061507fcf75823551f8a6b8e0bcc7fb2679 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1688910501 +0000 committer GitHub 1688910501 +0000 build(deps): bump tough-cookie from 4.0.0 to 4.1.3 Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) from 4.0.0 to 4.1.3. - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](https://github.com/salesforce/tough-cookie/compare/v4.0.0...v4.1.3) --- updated-dependencies: - dependency-name: tough-cookie dependency-type: indirect ... Signed-off-by: dependabot[bot] bx9tree 81a0908c193db8fe5342e968dd3f89302208e582 parent 7ba00284936dc9bb74c98d0a895129d9b866cac2 parent d39e153af5e21652b6e947e28a7b15d27c9206d9 author Mario Heiderich 1688716243 +0200 committer Mario Heiderich 1688716243 +0200 Merge branch 'main' of github.com:cure53/DOMPurify [\xtree 81a0908c193db8fe5342e968dd3f89302208e582 parent c4113958df5c573da593c58d95ffaf6ea6edbf3b author Mario Heiderich 1688716108 +0200 committer Mario Heiderich 1688716225 +0200 legal: Added full Apache 2.0 license, see #832 Mxtree 81a0908c193db8fe5342e968dd3f89302208e582 parent c4113958df5c573da593c58d95ffaf6ea6edbf3b author Mario Heiderich 1688716108 +0200 committer Mario Heiderich 1688716108 +0200 legal: Added full Apache 2.0 license, see #823 MxFtree dcd0ac7b77cf4c245b685c6d5f47fdedd14b808a parent 2e129a0241d5df2dcf74e271f9f2739863e82188 parent 36072dd3423d952d07cba084d2863f76fde925b5 author Cure53 1688056042 +0200 committer GitHub 1688056042 +0200 Merge pull request #828 from cure53/3.x Get main branch to be up to date again(axAtree dcd0ac7b77cf4c245b685c6d5f47fdedd14b808a parent 214825ee1e9c4371374ee920edaf412df8cad917 parent 2e129a0241d5df2dcf74e271f9f2739863e82188 author Cure53 1688054614 +0200 committer GitHub 1688054614 +0200 Merge pull request #827 from cure53/main Final merge before 3.0.4 release`cxtree dcd0ac7b77cf4c245b685c6d5f47fdedd14b808a parent da7fcafc42afa50a0645930dade1f01e2481806d author Mario Heiderich 1688054521 +0200 committer Mario Heiderich 1688054521 +0200 chore: Updated package-lock.json with latest version number qVx9tree da2a36b42b1a2ffce801844682b1313bce4d30ae parent 2bb647721ee64ea61a0fce4a00b9743fc57bbaa3 parent abf354f7d76bf6fd927f150f330715eeb85ff798 author Mario Heiderich 1688054329 +0200 committer Mario Heiderich 1688054329 +0200 Merge branch 'main' of github.com:cure53/DOMPurify t_x tree da2a36b42b1a2ffce801844682b1313bce4d30ae parent 7f2ba0d32b048184d7b74d896a63ebf7cde7b489 author Mario Heiderich 1688053741 +0200 committer Mario Heiderich 1688054302 +0200 chore: Preparing 3.0.4 release UwIx4tree da2a36b42b1a2ffce801844682b1313bce4d30ae parent fac0965f5afa343b20266d38e49e68f2905d822e parent abf354f7d76bf6fd927f150f330715eeb85ff798 author Cure53 1688054008 +0200 committer GitHub 1688054008 +0200 Merge pull request #825 from cure53/main Merge main into 3.x\x tree da2a36b42b1a2ffce801844682b1313bce4d30ae parent 7f2ba0d32b048184d7b74d896a63ebf7cde7b489 author Mario Heiderich 1688053741 +0200 committer Mario Heiderich 1688053741 +0200 chore: Preparing 3.0.6 release VIxtree f594479dbd499c918940f675e3b0bd021e6b6f60 parent d129cc05d6d1d81c72c61efb1889026114d6a522 author Mario Heiderich 1688052627 +0200 committer Mario Heiderich 1688052627 +0200 Fix: addressed a bypass on jsdom 22 when noframes tag is allowed UxTtree 619561844c41a300fc1f6faa473db8872e000625 parent a97831ad39b17ecc1e1bc157992516c998849494 parent 84a37ec9033e9665cf90853b96eb2a39cbda5b20 author Cure53 1685868246 +0200 committer GitHub 1685868246 +0200 Merge pull request #815 from masatokinugawa/patch-1 Fixed a typo in shadowrootmode attributegx!tree 619561844c41a300fc1f6faa473db8872e000625 parent a97831ad39b17ecc1e1bc157992516c998849494 author Masato Kinugawa 1685813309 +0900 committer GitHub 1685813309 +0900 Fixed a typo `shadowrootmod` should be `shadowrootmode`.[xtree 377fac1c3cbc37cc40bf050ec4ad11613e496fc1 parent 40496e767f6991f36938fd591e87de977ed0c319 author Dr.-Ing. Mario Heiderich 1685521087 +0200 committer Dr.-Ing. Mario Heiderich 1685521087 +0200 fix: fixed a minor range issue on the demo website Ux~tree e6b12646bf560ba8db7997a0323e87352576882a parent 493317f76257a95ad260460d0e68c0f1087b99eb parent 1e4cd4e6456e0d81f94b7171fbfd693ef8391169 author Cure53 1685201671 +0200 committer GitHub 1685201671 +0200 Merge pull request #809 from cure53/dependabot/npm_and_yarn/socket.io-parser-4.2.3 build(deps): bump socket.io-parser from 4.2.1 to 4.2.3OtP0xtree e6b12646bf560ba8db7997a0323e87352576882a parent 493317f76257a95ad260460d0e68c0f1087b99eb author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1684888874 +0000 committer GitHub 1684888874 +0000 build(deps): bump socket.io-parser from 4.2.1 to 4.2.3 Bumps [socket.io-parser](https://github.com/socketio/socket.io-parser) from 4.2.1 to 4.2.3. - [Release notes](https://github.com/socketio/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io-parser/compare/4.2.1...4.2.3) --- updated-dependencies: - dependency-name: socket.io-parser dependency-type: indirect ... Signed-off-by: dependabot[bot] ͔x4tree bea7b7c71a935f56d82e9ada607e4561a73bae85 parent b5670ad6e212f555df2ff35f4aaa97d60d64c283 parent 493317f76257a95ad260460d0e68c0f1087b99eb author Cure53 1683375761 +0200 committer GitHub 1683375761 +0200 Merge pull request #805 from cure53/main Merge main into 3.xNU[x tree bea7b7c71a935f56d82e9ada607e4561a73bae85 parent be659912cffff91de642e727a5a0c15606426816 author Mario Heiderich 1683375469 +0200 committer Mario Heiderich 1683375469 +0200 chore: preparing 3.0.3 release 49IWxytree 105103d8d8e124124aca6c6caaef435e6109623e parent 31ee39f9ae9b0cd544315c0c87c469d554e83584 parent 70e05d7e12c834c8a43c52ff43a5109d4f736b59 author Cure53 1683366600 +0200 committer GitHub 1683366600 +0200 Merge pull request #801 from dejang/refactor-policy-creation-order create internal trustedTypes policy only if not specified via config object{,x{tree 2c776c8612acc0c9673431cac5fe76412b109321 parent 8d4a26772a49d54ec1d9741a9f0f3083e24b4072 parent cc13cf7129f4630c3555d2f255bfd46ba6e6e467 author Cure53 1683285958 +0200 committer GitHub 1683285958 +0200 Merge pull request #803 from cure53/dependabot/npm_and_yarn/engine.io-and-socket.io-6.4.2 build(deps): bump engine.io and socket.iotNHxztree 2c776c8612acc0c9673431cac5fe76412b109321 parent 8d4a26772a49d54ec1d9741a9f0f3083e24b4072 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1683161736 +0000 committer GitHub 1683161736 +0000 build(deps): bump engine.io and socket.io Bumps [engine.io](https://github.com/socketio/engine.io) and [socket.io](https://github.com/socketio/socket.io). These dependencies needed to be updated together. Updates `engine.io` from 6.2.1 to 6.4.2 - [Release notes](https://github.com/socketio/engine.io/releases) - [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/engine.io/compare/6.2.1...6.4.2) Updates `socket.io` from 4.5.3 to 4.6.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/4.5.3...4.6.1) --- updated-dependencies: - dependency-name: engine.io dependency-type: indirect - dependency-name: socket.io dependency-type: indirect ... Signed-off-by: dependabot[bot] 4Ԙxtree 47d465614cf6ee84dc8a71c95b9a54551b1e1c20 parent 8d4a26772a49d54ec1d9741a9f0f3083e24b4072 author dejang 1683081469 -0400 committer dejang 1683085427 -0400 create internal trustedTypes policy only if not specified via config object Wxotree 82b7142c9222444c577c410023617719e1fd00f8 parent 9b0c4caf808d4ffd52cc22f1847cfa36c5e3aa2b parent beae837ef8f79c5d5cc0ec3f2bf95ff76176707b author Cure53 1683007830 +0200 committer GitHub 1683007830 +0200 Merge pull request #800 from dejang/configurable-trusted-types-policy support TRUSTED_TYPES_POLICY configuration optiongsKxtree 82b7142c9222444c577c410023617719e1fd00f8 parent 9b0c4caf808d4ffd52cc22f1847cfa36c5e3aa2b author dejang 1682948590 -0400 committer dejang 1682956754 -0400 support TRUSTED_TYPES_POLICY configuration option nMQxZtree 4fc5ec3b1f5a663824e02f725ff2b07c94d27805 parent 31b88ac3936d551f20d0c03bd262f6a26468ee8c parent 668c6d4484011542f70bbbdd2ad4152ed96fa3bc author Cure53 1682577141 +0200 committer GitHub 1682577141 +0200 Merge pull request #795 from SelfMadeSystem/patch-1 Moved feDropShadow to the svg filter allowlistjz!xtree 4fc5ec3b1f5a663824e02f725ff2b07c94d27805 parent 31b88ac3936d551f20d0c03bd262f6a26468ee8c author SelfMadeSystem 1682518106 -0700 committer GitHub 1682518106 -0700 Moved feDropShadow to the svg filter allowlist The reason it was there was because "If I remember correctly there was some mXSS risk connected to those", however I searched and couldn't find one (and neither could cure53 https://github.com/cure53/DOMPurify/issues/573#issuecomment-1522902754) and so I change it back.0xtree 9e7be07297d2b8334c633e89382555c49bbafeb3 parent 7fee4d376c9ac8943009efa4e819f044d1ad3fb0 author Mario Heiderich 1682493236 +0200 committer Mario Heiderich 1682493236 +0200 chore: fixed the tests after bumping xo and dropping yaml deps @V(xftree 723d2b6b43a59872f700543a270903c6d5296537 parent c138b5db0a3b84146f46f1a54465873ed73f685b parent 0616507728f8ff6c56e5f44241a93268f9b64de7 author Cure53 1682492664 +0200 committer GitHub 1682492664 +0200 Merge pull request #794 from cure53/dependabot/npm_and_yarn/yaml-and-xo--removed build(deps): bump yaml and xorlk3x;tree 723d2b6b43a59872f700543a270903c6d5296537 parent c138b5db0a3b84146f46f1a54465873ed73f685b author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1682397023 +0000 committer GitHub 1682397023 +0000 build(deps): bump yaml and xo Removes [yaml](https://github.com/eemeli/yaml). It's no longer used after updating ancestor dependency [xo](https://github.com/xojs/xo). These dependencies need to be updated together. Removes `yaml` Updates `xo` from 0.48.0 to 0.54.1 - [Release notes](https://github.com/xojs/xo/releases) - [Commits](https://github.com/xojs/xo/compare/v0.48.0...v0.54.1) --- updated-dependencies: - dependency-name: yaml dependency-type: indirect - dependency-name: xo dependency-type: direct:development ... Signed-off-by: dependabot[bot] xDtree 10d2eb34ed3db16ec00c92ff34253da30a08753a parent 465da54cd59f708c04df49bf21f19a6003439825 parent c138b5db0a3b84146f46f1a54465873ed73f685b author Cure53 1681491691 +0200 committer GitHub 1681491691 +0200 Merge pull request #793 from cure53/main chore: updated website version infoax tree 10d2eb34ed3db16ec00c92ff34253da30a08753a parent b1ec0df3a73d3b5bf0f41cbfc361c5967f9e94ad author Dr.-Ing. Mario Heiderich 1681491613 +0200 committer Dr.-Ing. Mario Heiderich 1681491613 +0200 chore: updated website version info R5xJtree 9510847eea83196ed9ad794cfee12e4e4c9c8e4d parent 6e3b771162f1c47ad0a2fa9c651bcbf01c6cd520 parent b1ec0df3a73d3b5bf0f41cbfc361c5967f9e94ad author Cure53 1681490896 +0200 committer GitHub 1681490896 +0200 Merge pull request #791 from cure53/main Merged main into 3.x for upcoming releasele—xtree 9510847eea83196ed9ad794cfee12e4e4c9c8e4d parent aa7cf630f524abb8dc0a2f9fb44a13d65ec7f8c3 author Dr.-Ing. Mario Heiderich 1681490448 +0200 committer Dr.-Ing. Mario Heiderich 1681490448 +0200 chore: preparing 3.0.2 release .OxJtree b58319e195b96423d1d91492bd80968aeb668aaa parent 1ed56d377646477b42d74cd75d43b062769f088c parent 7283be7039100e75f06f310f3a14d69162ff0a66 author Cure53 1681403311 +0200 committer GitHub 1681403311 +0200 Merge pull request #790 from mukilane/main fix: ensure ALLOWED_URI_REGEXP is resetaxutree b58319e195b96423d1d91492bd80968aeb668aaa parent 1ed56d377646477b42d74cd75d43b062769f088c author Mukil Elango 1681381105 +0000 committer Mukil Elango 1681381105 +0000 fix: ensure ALLOWED_URI_REGEXP is reset At ffe9ebfeb29139793afd855eda21d2eb36636c45, the `ALLOWED_URI_REGEXP` was set without properly resetting it for subsequent sanitize calls. zxDtree dc963432ee7867878895a36a34dd6e5c80f68ad3 parent 81ad921c8d1c2b61db96408ee82ed1a86ae2f09e parent f239db20bc580400119e7fab5e258ad4b408251a author Cure53 1680685767 +0200 committer GitHub 1680685767 +0200 Merge pull request #788 from duyhai94/haicd194 add tag mprescripts to mathMl 1680658737 +0700 committer GitHub 1680658737 +0700 Update tags.jsI xltree 6b9e3beb9e91d17dfd2ba3c2b7d3e613cfc234fd parent 92902b0258733b512aae1b55a4ad35cc45caa3a7 parent 672e98751216cf5203d3b8a01170db416570e0d4 author Cure53 1680624088 +0200 committer GitHub 1680624088 +0200 Merge pull request #786 from buzinas/bump-browsers-versions Bump browsers versions to support for…of and let/constssxtree 31e1b93e5368b79a16a56cf44f565066991515b9 parent 92902b0258733b512aae1b55a4ad35cc45caa3a7 author hai.cd 1680601863 +0700 committer hai.cd 1680601863 +0700 add tag mprescripts to mathMl mDxxtree 6b9e3beb9e91d17dfd2ba3c2b7d3e613cfc234fd parent 00d24c161fc8a745ab687e8a147131c2e5c18b07 author Vitor Buzinaro 1680198911 -0300 committer Vitor Buzinaro 1680199651 -0300 fix tests - remove unneeded rollup commonjs plugin - convert expect.js to ES Module and rename it to expect.mjs - dynamically import expect.mjs on NodeJS so it can run with JSDOM xtree 7822db21f314a60edc210227e67e0ed8fd7748af parent 92902b0258733b512aae1b55a4ad35cc45caa3a7 author Vitor Buzinaro 1679949239 +0000 committer Vitor Buzinaro 1679949239 +0000 bump browsers versions to support for…of and let/const XxItree d5a43aa5ee88dd028dcf9f73bbe02012e8664b23 parent 231e50e22dd4a459477b0f54f82cba3cdb2443f5 parent 47d6a3a0f3c8296852e4e64d3943f492962a4bf7 author Cure53 1679600442 +0100 committer GitHub 1679600442 +0100 Merge pull request #783 from Kiwka/main Add sms scheme to URI allowed by default ]cxtree d5a43aa5ee88dd028dcf9f73bbe02012e8664b23 parent 231e50e22dd4a459477b0f54f82cba3cdb2443f5 author Olena Sovyn 1679169012 +0000 committer Olena Sovyn 1679169012 +0000 Add sms to default allowed URI {L/xrtree ed9ecdeadb1dddfe15d0cb2a95a210da9d2d6e7b parent 44e20e12e0ee4f92d9fb16c47f6903f8806edc90 parent 82686f252eb291cbfeea91ce4b55648a7ff1b032 author Cure53 1678880965 +0100 committer GitHub 1678880965 +0100 Merge pull request #781 from cure53/dependabot/npm_and_yarn/webpack-5.76.1 build(deps): bump webpack from 5.68.0 to 5.76.1qޑ(x~tree ed9ecdeadb1dddfe15d0cb2a95a210da9d2d6e7b parent 44e20e12e0ee4f92d9fb16c47f6903f8806edc90 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1678826928 +0000 committer GitHub 1678826928 +0000 build(deps): bump webpack from 5.68.0 to 5.76.1 Bumps [webpack](https://github.com/webpack/webpack) from 5.68.0 to 5.76.1. - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](https://github.com/webpack/webpack/compare/v5.68.0...v5.76.1) --- updated-dependencies: - dependency-name: webpack dependency-type: indirect ... Signed-off-by: dependabot[bot] =x<tree d27908944adf299e0063b9ed1e899393977883f2 parent cf263180b1afab766e6f48301b586df5c67211f1 parent 6e3b771162f1c47ad0a2fa9c651bcbf01c6cd520 author Cure53 1677425525 +0100 committer GitHub 1677425525 +0100 Merge pull request #775 from cure53/3.x Get main up to date from 3.x8`]'x tree d27908944adf299e0063b9ed1e899393977883f2 parent be7b24e7c5839798317fca0a279565abdcdc6b25 author Mario Heiderich 1677425290 +0100 committer Mario Heiderich 1677425290 +0100 chore: preparing 3.0.1 release |HxBtree b7d989c9f00bee53c7225b70bfcb23a3897a935d parent d8d81778e1eca1a4706ecb3ad9224578b39a38ac parent cf263180b1afab766e6f48301b586df5c67211f1 author Cure53 1677424454 +0100 committer GitHub 1677424454 +0100 Merge pull request #774 from cure53/main Merging latest from main into 3.xaExtree b7d989c9f00bee53c7225b70bfcb23a3897a935d parent 59bf4d196ea4b33662ef970c04166427c4af91b5 author Mario Heiderich 1677256404 +0100 committer Mario Heiderich 1677256404 +0100 fix: fixed an issue with the config-reset for custom elements Uux tree 5e90e5d07249d38a72a62b159302440160f911e6 parent 4649b97d93088f73f15b60b50b838e9231e453ff author Mario Heiderich 1676376184 +0100 committer Mario Heiderich 1676376184 +0100 test: re-added main to branch for browser test runs ҾOߔx4tree a7b9ba40ed76d104c2b0fdcab35444e5f0729247 parent 67bfc291d79f39598d1f968b0b283229deab746f parent d8d81778e1eca1a4706ecb3ad9224578b39a38ac author Cure53 1676306803 +0100 committer GitHub 1676306803 +0100 Merge pull request #770 from cure53/3.x Merged 3.x into mainh[x tree a7b9ba40ed76d104c2b0fdcab35444e5f0729247 parent b2f1c43de6a7343bd5bf8a596f395bd3a2dd771c author Mario Heiderich 1676306076 +0100 committer Mario Heiderich 1676306076 +0100 chore: preparing 3.0.0 release FIݓxStree fd8fc2b73bf207238db96f0c80458ba4c6f37942 parent e01869e0f20223fb85ac3dbed226f9c4de81564a author Mario Heiderich 1676305512 +0100 committer Mario Heiderich 1676305512 +0100 see #767 see #761 feat: added better check for shadowrootmod feat: added ALLOW_SELF_CLOSE_IN_ATTR tag test: added test case egŘxtree 07fff8ac386a9f365b25bb6a20a22706ac2269f7 parent a15b453c6db1f60aecc954df80e70a0bb78d6840 author Dr.-Ing. Mario Heiderich 1675789789 +0100 committer Dr.-Ing. Mario Heiderich 1675789789 +0100 test: Added 3.x tag only for 3.x branch actions Tx|tree 8d07ae5df5be568a7b661236969284d1eb1d5644 parent 9e238b6888f6cd8d07c53d8301d4eea7fe24bc29 parent c6e4951035513dfc83c54c62b5f658de96d46a59 author Cure53 1674912851 +0100 committer GitHub 1674912851 +0100 Merge pull request #764 from cure53/dependabot/npm_and_yarn/ua-parser-js-0.7.33 build(deps): bump ua-parser-js from 0.7.31 to 0.7.33_rÕ/x tree 8d07ae5df5be568a7b661236969284d1eb1d5644 parent 9e238b6888f6cd8d07c53d8301d4eea7fe24bc29 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1674814944 +0000 committer GitHub 1674814944 +0000 build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 Bumps [ua-parser-js](https://github.com/faisalman/ua-parser-js) from 0.7.31 to 0.7.33. - [Release notes](https://github.com/faisalman/ua-parser-js/releases) - [Changelog](https://github.com/faisalman/ua-parser-js/blob/master/changelog.md) - [Commits](https://github.com/faisalman/ua-parser-js/compare/0.7.31...0.7.33) --- updated-dependencies: - dependency-name: ua-parser-js dependency-type: indirect ... Signed-off-by: dependabot[bot] rxXtree 38b2ff3735fc8eac12944dc039573d12b34384d2 parent 471d6a3143fa759d3ebbee4b46c95c23ec63244c parent a15b453c6db1f60aecc954df80e70a0bb78d6840 author Cure53 1674752289 +0100 committer GitHub 1674752289 +0100 Merge pull request #763 from cure53/3.x chore: Added checks to set isSupported to false for MSIE hmxtree 38b2ff3735fc8eac12944dc039573d12b34384d2 parent 54f271e66c88a01434657438f49c0eb560345a84 parent 471d6a3143fa759d3ebbee4b46c95c23ec63244c author Cure53 1674752151 +0100 committer GitHub 1674752151 +0100 Merge branch 'main' into 3.xOlxtree de8620ca7ecaa96677430356ea171e64b754145c parent 0caac049bec0ee53be22ff5bc11a0a3bbecdecbf author Mario Heiderich 1674750980 +0100 committer Mario Heiderich 1674750980 +0100 chore: Added checks to set isSupported to false for MSIE !T\xtree 57953da2f2d46183e9e5da7f2831eb806ada773a parent 31d09e4e95d8511387ed4e9f685f321ba6fcb292 author Mario Heiderich 1674749054 +0100 committer Mario Heiderich 1674749054 +0100 test: Fixed two more breaking commas, duh 3~MÓx tree 0bc58ff7a937913583032632509b263e4bccab62 parent 912439c9e032fcf7edb113fbae1c3fe5f484f695 author Mario Heiderich 1674748663 +0100 committer Mario Heiderich 1674748663 +0100 test: Fixed a breaking comma /+Hx=tree 93a6be824988489dc3a51e5aa5c01a0d15bfb52e parent 018d0de2c39c1ca1639e1d944ffe33c6ef824f3c parent 0caac049bec0ee53be22ff5bc11a0a3bbecdecbf author Cure53 1674748494 +0100 committer GitHub 1674748494 +0100 Merge pull request #762 from cure53/3.x Merge changes from 3.x branchea$xtree 93a6be824988489dc3a51e5aa5c01a0d15bfb52e parent 4dad7bbc6ed74cf40f674861649d3f46fc82ae24 author Dr.-Ing. Mario Heiderich 1674748081 +0100 committer Dr.-Ing. Mario Heiderich 1674748081 +0100 docs: Upodated README to be more accurate for MSIE Uex/tree 416c0fa6da2a9fabe6eecf882cb0e3965b95e5c5 parent cf0e68329a20b6ece7223efd48b15db3526c8881 parent 018d0de2c39c1ca1639e1d944ffe33c6ef824f3c author Cure53 1673642748 +0100 committer GitHub 1673642748 +0100 Merge pull request #759 from cure53/main Sync with mainȽ[˘xHtree 416c0fa6da2a9fabe6eecf882cb0e3965b95e5c5 parent fbdf80a4bbf2ffe95bf3d5f0c841abf4bcce10b9 parent cf0e68329a20b6ece7223efd48b15db3526c8881 author Cure53 1673638841 +0100 committer GitHub 1673638841 +0100 Merge pull request #758 from cure53/3.x Merge pull request #757 from cure53/maintwdx>tree 87778ba955397bea2968fe81dc390c3272bfbe15 parent eb230ea7e50e192282924efbe5ab66e564327a0d parent 182063935a8095737c815d9a6cad310dfc5d8c61 author Cure53 1673616624 +0100 committer GitHub 1673616624 +0100 Merge pull request #757 from cure53/main Synching 3.x branch with main=^xtree 416c0fa6da2a9fabe6eecf882cb0e3965b95e5c5 parent eeea3c19d47229cb2389926934216d1a5cf33347 author Mario Heiderich 1673615413 +0100 committer Mario Heiderich 1673615413 +0100 docs: Updated README to mention node coverage correctly (IS)xtree 91ab27f21b14b4e1e39ec33354e67698adb7f92d parent 182063935a8095737c815d9a6cad310dfc5d8c61 author Mario Heiderich 1673614721 +0100 committer Mario Heiderich 1673614721 +0100 chore: Updated package-lock file from old version OPhxtree 87778ba955397bea2968fe81dc390c3272bfbe15 parent 9a56bf45b3836a899fe53851b7f9dc7e2c27a1f4 author Mario Heiderich 1673614614 +0100 committer Mario Heiderich 1673614614 +0100 chore: Re-added the check because of Safari strill struggling with it H Xxtree 64b43ce72ec7ac1005f90c6473d38016223483b4 parent 892662f9b0152d019bbe4909daba3470f85623c4 author Mario Heiderich 1673614313 +0100 committer Mario Heiderich 1673614313 +0100 chore: Removed another segment with string-based mXSS detection 1BUx tree ee980f9654bbc36d3e5eaab207940d614f521227 parent ca9b36f5df8451114a69314d13d0a14d275ced59 author Mario Heiderich 1673613824 +0100 committer Mario Heiderich 1673613824 +0100 test: Fixed a test expectation after changing payload NJRHxtree cb8031449034c5429acdfba615a623b0c37981a4 parent d1fdd06d80c477c03c2fd68205096f65e5f76061 author Mario Heiderich 1673613633 +0100 committer Mario Heiderich 1673613633 +0100 chore: Re-added one of the string-based mXSS detections for jsdom ;Urxtree 54ebdd376a9b617e4d8646decafe5c9b6be17d4d parent 334121419cb1d8385c71ed11011f73cf4a3f6186 author Mario Heiderich 1673613318 +0100 committer Mario Heiderich 1673613318 +0100 chore: Got rid of string-based mXSS detection code (experimental) AVxtree b85e9fbe48ada72cc90ad26cc1c19baa7b0bcf1f parent 63d20ce33139b267922d0536386f64b2d59dd528 author Mario Heiderich 1673287802 +0100 committer Mario Heiderich 1673287802 +0100 test: Fixed a test expectation for older Firefox Q3xtree 61e6b3e91018f96dc1a02156d697587011284976 parent 3c1c03b3c9d7f4b0702fadc61cad2772e054e324 author Mario Heiderich 1673287080 +0100 committer Mario Heiderich 1673287080 +0100 test: Removed another bunch of unused test expectations for all browsers gYxtree cccb7f25496cc656121795816539f324e13e6e90 parent 3782c4d02a498672dc9dbb1c9a468c57c6473527 author Mario Heiderich 1673276301 +0100 committer Mario Heiderich 1673276301 +0100 test: Fixed a test expectation for older Firefox yOlx tree 005d04fab116961194bc6e4e3f0bdf6c889d908b parent abce9762489eb337ac19accd8939af82420443f3 author Mario Heiderich 1673276152 +0100 committer Mario Heiderich 1673276152 +0100 test: Fixed early Safari & Chrome tests on main branch YKRx:tree c09acdde6b374b0b34efd56b965a8edf550299f8 parent ec82405e046847b39931145308c6a9ae3ae80398 parent eb230ea7e50e192282924efbe5ab66e564327a0d author Cure53 1673275773 +0100 committer GitHub 1673275773 +0100 Merge pull request #756 from cure53/3.x Merged 3.x tests into main1]Uxtree c09acdde6b374b0b34efd56b965a8edf550299f8 parent 6fffb194d0eeb1c3169b4079037adcc32c44d1d0 author Mario Heiderich 1673275502 +0100 committer Mario Heiderich 1673275502 +0100 test: Fixed a MathML test expectation for Firefox FQx tree 3e4e8bcd1c2cb6e642c40d89781781b086cc99d5 parent 4587899b659f1ec46649f88ef030d87a885d4b8d author Mario Heiderich 1673275065 +0100 committer Mario Heiderich 1673275065 +0100 test: Removed additional MSIE only test expectations ~RxAtree 07f19c6a14ae39ec084dd511be35dd0e71f54897 parent 0d78158eeb27f3eb77291f1f807886f88fd4004d parent 0e9660512e109121e27821d50ab01617826443ad author Mario Heiderich 1673273159 +0100 committer Mario Heiderich 1673273159 +0100 Merge branch '3.x' of github.com:cure53/DOMPurify into 3.x G^ex tree f9f6914fb4a702be6398e136ee5aade5b5661328 parent 64e7cac9a91d7d35dacfd647082e96acfe6b8c93 author Mario Heiderich 1673273089 +0100 committer Mario Heiderich 1673273089 +0100 test: Removed a lot of MSIE only tests from 3.x branch -RxKtree 0185d5d7acea6c7ea0bb6ff4e8b5aa96c7c4789b parent 64e7cac9a91d7d35dacfd647082e96acfe6b8c93 parent ec82405e046847b39931145308c6a9ae3ae80398 author Cure53 1673102226 +0100 committer GitHub 1673102226 +0100 Merge pull request #754 from cure53/main Getting 3.x branch to be in sync with maindxtree 0185d5d7acea6c7ea0bb6ff4e8b5aa96c7c4789b parent 9c935f0e319f7e18389f86c043448642f1d41ddd author Mario Heiderich 1673090104 +0100 committer Mario Heiderich 1673090104 +0100 test: Fixed a dumb typo wGxtree 27cbcb813dc556dcf19a8bf389ba84aa88ec1af7 parent 81cd918a2a9ed1b5b01e20050104e7151b5238ed author Mario Heiderich 1673088587 +0100 committer Mario Heiderich 1673088587 +0100 test: Fixed the browser test versions for Chrome & Safari 0T!xtree 58b0b00dee4866d5322404fa282c6c1e8d94a968 parent 9d66936bd43b9c05f6e3c94b74d12781d55113be author Mario Heiderich 1673026362 +0100 committer Mario Heiderich 1673026362 +0100 See #751 test: Removed currently useless prototype pollution tests V•xtree e3a0ea0bc3b6ce90ee159f0dcdb2667fd1589024 parent bd0fa91e30181126573003d4cfabf0878d3683d7 author Mario Heiderich 1673025919 +0100 committer Mario Heiderich 1673025919 +0100 docs: Updated README to have currently accurate version number +Ux`tree 11a61b667584349eb5fdeba8b23c9f3bce6791ff parent 25d92b3bdc77d08157618d6b37393be708c4b993 parent 64e7cac9a91d7d35dacfd647082e96acfe6b8c93 author Cure53 1673025144 +0100 committer GitHub 1673025144 +0100 Merge pull request #752 from cure53/3.x Attempting a merge to check first 3.x version without MSIE cruftl"xtree 11a61b667584349eb5fdeba8b23c9f3bce6791ff parent 6fbc8288410d1f984ca3de25401d443c02b22e26 author Mario Heiderich 1673024952 +0100 committer Mario Heiderich 1673024952 +0100 test: Getting workflows ready for a yolo merge P x7tree 218c1393be84d7ead12f22e7e64b1f36b64eb564 parent 4d59e6fad7ea14843791e7a5b03eeb6f670aa37d author Mario Heiderich 1673022737 +0100 committer Mario Heiderich 1673022737 +0100 test: Set Browserstack tests to run on Node 19 test: Attempted to add Safari 15 to browser array raxtree ba2f50431d24d576df3cfc5378b0d6a05078ffed parent 7707e9d96bc864dfff730a74b19ba2a06830175f author Mario Heiderich 1673022313 +0100 committer Mario Heiderich 1673022313 +0100 test: Attempting to set CodeQL & build tests to 3.x branch for now y/Vxtree 94bf774e6b45efb73c64d2c59d8c4dcb2eca783b parent 25d92b3bdc77d08157618d6b37393be708c4b993 author Mario Heiderich 1673017321 +0100 committer Mario Heiderich 1673017321 +0100 chore: Removed MSIE-only features chore: Removed MSIE-only tests Uxtree d839c154f61796b19d42423bddfce1a474b531dd parent 1fadf5620b501073b180a59e6b435133b2492893 author Mario Heiderich 1673014603 +0100 committer Mario Heiderich 1673014603 +0100 docs: Added note to README about MSIE compat/2.x branch Pxktree c879e50b4fdd1dd9c772de68245f2f81931c556d parent 4c47adaee362323141067526938912928ecb2324 parent 7cf9c37f98dff9445f011fd92e25feabd7512400 author Cure53 1673014347 +0100 committer GitHub 1673014347 +0100 Merge pull request #750 from cure53/dependabot/npm_and_yarn/json5-1.0.2 build(deps): bump json5 from 1.0.1 to 1.0.28l4xtree 8eabc4e0d516f28e0f0ef8668d0e78ce4051c54c parent 6fe20b3c33f2f9c4ae5c5f82d1b59cfe1cdd3f8d author Mario Heiderich 1673014204 +0100 committer Mario Heiderich 1673014204 +0100 chore: Prepare 2.4.3, final feature release compatible w. MSIE10/11 VL*xQtree 79fcc76cb686937b6d8671118c2cde171cf7033a parent 6fe20b3c33f2f9c4ae5c5f82d1b59cfe1cdd3f8d author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1673010430 +0000 committer GitHub 1673010430 +0000 build(deps): bump json5 from 1.0.1 to 1.0.2 Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2. - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](https://github.com/json5/json5/compare/v1.0.1...v1.0.2) --- updated-dependencies: - dependency-name: json5 dependency-type: indirect ... Signed-off-by: dependabot[bot] e{xWtree 4859894a7c54f9a9ba0132a7bda863785b5d6fcf parent 4464014e7349cf1286b3ce76786286ac5f5a6e79 parent 12f980af235afc2e1aafb2be150c6a0481474bd3 author Mario Heiderich 1673010302 +0100 committer Mario Heiderich 1673010302 +0100 fix: merged from latest main Merge branch 'main' of github.com:cure53/DOMPurify uhx tree ff184e70525d03624c45a6091498a2a238ef02d4 parent b5f782aafccb496597decc9d31bb62389308c1e8 author Cure53 1672988376 +0100 committer GitHub 1672988376 +0100 Update README.md docs: Fixed version number>Hx tree 4859894a7c54f9a9ba0132a7bda863785b5d6fcf parent b5f782aafccb496597decc9d31bb62389308c1e8 author Mario Heiderich 1672934165 +0100 committer Mario Heiderich 1672934165 +0100 chore: Preparing 2.4.2 release UIxtree 9579ae1b820e25910d2dc9127be9f9e8e8f9fa70 parent e7f86de774a3a3aa39e0c01def30b8b5f6f15b4b author Mario Heiderich 1672932751 +0100 committer Mario Heiderich 1672932751 +0100 fix: Fixed a prototype pollution bug reported by @kevin_mizu tVmxjtree 948b286c3dd5732e238b3c48d237cfd646791d26 parent e0d77aa7e40b9a1552642b0d9c1bc4c2e8fbbfb1 parent cdd1cf2afd24ddebe2f53747ebbaea0aebd1d9ef author Cure53 1671557879 +0100 committer GitHub 1671557879 +0100 Merge pull request #748 from tosmolka/tosmolka/747 Fix Trusted Types Sink violation with empty input and NAMESPACE%}rxtree 948b286c3dd5732e238b3c48d237cfd646791d26 parent 4cc7ed1824c4006ce8567363d5a74a640a65f672 author Tobias Smolka 1671465917 +0100 committer Tobias Smolka 1671465917 +0100 Fix formatting eIx tree 79928fff6b1e8427200a8159f590dc30e5f6f314 parent e0d77aa7e40b9a1552642b0d9c1bc4c2e8fbbfb1 author Tobias Smolka 1671465535 +0100 committer Tobias Smolka 1671465535 +0100 Fix Trusted Types Sink violation with empty input and NAMESPACE [Kxrtree edff3c949d7369cad9191683da1cdba0ff3320b7 parent 457fb4a8ee9d50b8033f86a10ea442ed8437ca38 parent 4151cd9c93b1a34ff538d83de27b2e868b22391f author Cure53 1670569891 +0100 committer GitHub 1670569891 +0100 Merge pull request #745 from cure53/dependabot/npm_and_yarn/qs-and-body-parser-6.11.0 build(deps): bump qs and body-parserrFxatree edff3c949d7369cad9191683da1cdba0ff3320b7 parent 457fb4a8ee9d50b8033f86a10ea442ed8437ca38 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1670546647 +0000 committer GitHub 1670546647 +0000 build(deps): bump qs and body-parser Bumps [qs](https://github.com/ljharb/qs) and [body-parser](https://github.com/expressjs/body-parser). These dependencies needed to be updated together. Updates `qs` from 6.7.0 to 6.11.0 - [Release notes](https://github.com/ljharb/qs/releases) - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](https://github.com/ljharb/qs/compare/v6.7.0...v6.11.0) Updates `body-parser` from 1.19.0 to 1.20.1 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](https://github.com/expressjs/body-parser/compare/1.19.0...1.20.1) --- updated-dependencies: - dependency-name: qs dependency-type: indirect - dependency-name: body-parser dependency-type: indirect ... Signed-off-by: dependabot[bot] yx{tree 32f55ed4d9f3e1a2573707210ad73618ad6ddd16 parent dc742469781321e17b14306f7f43f53e108e0a23 parent 2c11e1813b10c66f40fa35874de25bb2fa8c8c0c author Cure53 1669111931 +0100 committer GitHub 1669111931 +0100 Merge pull request #737 from cure53/dependabot/npm_and_yarn/engine.io-and-socket.io-6.2.1 build(deps): bump engine.io and socket.ioqtCHxztree 32f55ed4d9f3e1a2573707210ad73618ad6ddd16 parent dc742469781321e17b14306f7f43f53e108e0a23 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1669087512 +0000 committer GitHub 1669087512 +0000 build(deps): bump engine.io and socket.io Bumps [engine.io](https://github.com/socketio/engine.io) and [socket.io](https://github.com/socketio/socket.io). These dependencies needed to be updated together. Updates `engine.io` from 6.1.2 to 6.2.1 - [Release notes](https://github.com/socketio/engine.io/releases) - [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/engine.io/compare/6.1.2...6.2.1) Updates `socket.io` from 4.4.1 to 4.5.3 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/4.4.1...4.5.3) --- updated-dependencies: - dependency-name: engine.io dependency-type: indirect - dependency-name: socket.io dependency-type: indirect ... Signed-off-by: dependabot[bot] :ϐx`tree de061d5b114f8e642dcecd9e2187d52b02463503 parent 751bb5464324f88366f292d9f0d0dc649ebdd14d parent 8af38d140c05a72db9052284dc6204b61f45495a author Cure53 1668440572 +0100 committer GitHub 1668440572 +0100 Merge pull request #732 from Pomierski/patch-1 chore: fix allowCustomizedBuiltInElements value in readmelZxtree de061d5b114f8e642dcecd9e2187d52b02463503 parent e627024aeeb3d468e8184891a7daab07cc8dfd04 author Piotr Pomierski <70658299+Pomierski@users.noreply.github.com> 1668433881 +0100 committer GitHub 1668433881 +0100 fix zIxKtree c457306ba986d74a62f8119c54a5001296b6a46c parent 751bb5464324f88366f292d9f0d0dc649ebdd14d author Piotr Pomierski <70658299+Pomierski@users.noreply.github.com> 1668432574 +0100 committer GitHub 1668432574 +0100 chore: fix allowCustomizedBuiltInElements comment in readme The comment seems to be incorrect. The comment above informs us that if we pass false as a value, then no customized built-ins are allowed.ux tree 7ac5ecd221b231e56c9a416d0031a94345e77cd3 parent 1b178afbd618f1dffa13f85a2312dd546a118eb7 author Mario Heiderich 1668088365 +0100 committer Mario Heiderich 1668088365 +0100 chore: preparing 2.4.1 release ITxstree 1c600dfd3960f9857264133af45e9efac5fe6a1f parent 88fa8430c6da4e4f7e899854c2856c4b104ee3ed parent 5fc1018234585c072bc8045ae4e58a8164006289 author Cure53 1668079974 +0100 committer GitHub 1668079974 +0100 Merge pull request #731 from cure53/dependabot/npm_and_yarn/minimatch-3.1.2 build(deps): bump minimatch from 3.0.4 to 3.1.2oxtree f7d26f752b1a3f04d51a9ed191e699322bc61a51 parent 52911074cdd17b0a5a20f68449429145641751bb author Mario Heiderich 1668069438 +0100 committer Mario Heiderich 1668069438 +0100 test: attempted to fix ALLOWED_NAMESPACES tests for IE/Edge v2 *Rxtree 82766a340bb9a413ebb6879173dc7e2b12a5b0f8 parent 39e3920194a0f6189e9ff76e4773eb35b9953b18 author Mario Heiderich 1668069237 +0100 committer Mario Heiderich 1668069237 +0100 test: attempted to fix ALLOWED_NAMESPACES tests for IE/Edge .Qߔ(x{tree a70a5052d5b0a156f6a928e2b3dcd932d796983b parent 39e3920194a0f6189e9ff76e4773eb35b9953b18 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1668066665 +0000 committer GitHub 1668066665 +0000 build(deps): bump minimatch from 3.0.4 to 3.1.2 Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.1.2. - [Release notes](https://github.com/isaacs/minimatch/releases) - [Commits](https://github.com/isaacs/minimatch/compare/v3.0.4...v3.1.2) --- updated-dependencies: - dependency-name: minimatch dependency-type: indirect ... Signed-off-by: dependabot[bot] $ x~tree 1de90620fa795d90e8fe736bbefd15a6554a285e parent 6dada571e36e43ae98e5d476b31c993b4d6f8019 parent fad725d65d3d6efd54daeed80c1049150c7ffb37 author Cure53 1668066638 +0100 committer GitHub 1668066638 +0100 Merge pull request #730 from cure53/dependabot/npm_and_yarn/socket.io-parser-4.0.5 build(deps): bump socket.io-parser from 4.0.4 to 4.0.5vxqtree 3c26424593de176fd695568f1dbcb5c6f4eeefb7 parent 6d7a88a7a008c54bbb1e18535c6c64eb03fb44db parent ccd5d2b7f1c761a8acf595835f56b4853402f262 author Cure53 1668066574 +0100 committer GitHub 1668066574 +0100 Merge pull request #729 from kevin-deyoungster/kdeyoungster/xml Add ADD_NAMESPACES option to support strict XML documentshs0xtree 571af383865d032c6b0f062a6d950b2712563324 parent 6d7a88a7a008c54bbb1e18535c6c64eb03fb44db author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1668041527 +0000 committer GitHub 1668041527 +0000 build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 Bumps [socket.io-parser](https://github.com/socketio/socket.io-parser) from 4.0.4 to 4.0.5. - [Release notes](https://github.com/socketio/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io-parser/compare/4.0.4...4.0.5) --- updated-dependencies: - dependency-name: socket.io-parser dependency-type: indirect ... Signed-off-by: dependabot[bot] sBxtree 3c26424593de176fd695568f1dbcb5c6f4eeefb7 parent 35bb0c5d5d0675bb78626b9209db801c7e6a0290 author Kevin de Youngster 1667933293 -0800 committer Kevin de Youngster 1667933293 -0800 lint new changes cR%x tree c94c2f0c6f52265cdff370d7212c46e52a1f52bb parent d68bb02012da2745b633b2082ae050f0a3badb56 author Tobias Smolka 1667919830 +0100 committer Kevin de Youngster 1667928546 -0800 Experiment with ALLOWED_NAMESPACES XSxtree 03f861dc78bf2b37b164dd4e8e8db69f77c50858 parent b64788787974be1a0be090988d13ac5bd14f84da author Kevin de Youngster 1667863302 -0800 committer Kevin de Youngster 1667863302 -0800 add tests for ADD_NAMESPACES Tx tree d054c3bdd7ba8931c30f6d150ba3c727496b41a7 parent 6d7a88a7a008c54bbb1e18535c6c64eb03fb44db author Kevin de Youngster 1667516571 -0700 committer Kevin de Youngster 1667516571 -0700 add ADD_NAMESPACES config ,Txtree 3b6a44aa627051f2693804f4793d434c6f3c1f13 parent 117d6989c22bb26b6fc9160944782c16f84f0ef8 author Mario Heiderich 1666689518 +0200 committer Mario Heiderich 1666689518 +0200 feat: expanded detection for template literals in SAFE_FOR_TEMPLATES EU֑xAtree 6db7167900dcf2a894682d22663008c933a25ee4 parent 3732ecfcaffffaffa1bfa8dba4e2dfe6aa15b1d4 parent 57930a07153ec8cfb6674518052ed3fcd9c72e22 author Cure53 1665830361 +0200 committer GitHub 1665830361 +0200 Merge pull request #723 from marcpenya-tf/upgrade-jsdom chore: bump jsdom!bΞxtree 6db7167900dcf2a894682d22663008c933a25ee4 parent 3732ecfcaffffaffa1bfa8dba4e2dfe6aa15b1d4 author Marc Peña Segarra 1665660430 +0200 committer Marc Peña Segarra 1665660430 +0200 chore: bump jsdom ۘPxtree 0f6edf0241ec14b928bfcbb3412e08d121f08e31 parent 93bb4b146bc266a8a764ca426584a02625c8ef22 author Mario Heiderich 1662117444 +0200 committer Mario Heiderich 1662117444 +0200 fix: Fixed an exception caused by DOM Clobbering, thanks Masato Txtree 00f6157bed0307a92cb90cb4aed9788e8b391b79 parent 3cdda6ea894f1047b3fef45ee87ec0b635dfbd55 author Cure53 1661364466 +0200 committer GitHub 1661364466 +0200 docs: changed headline from h2 to h3jG)xtree f8848a984d152e02d9dc47db003ba9f561073778 parent 38239bb1a41b08a21ba05acc24de0fee57daf5c1 author Mario Heiderich 1661362974 +0200 committer Mario Heiderich 1661362974 +0200 docs: added mention of @types/dompurify to README `Px tree 8a75e66c99b13124f531f3dc691d0e5ce2c54929 parent aac53431a302001852f12323366dd643c270c18e author Mario Heiderich 1661362349 +0200 committer Mario Heiderich 1661362349 +0200 chore: prepare 2.4.0 release bFxtree 5fc9a1075f71ff72f3764cc133cda438d5d8b9b8 parent 0363d3ad173b76231112f7ded965e44276e276dd author Mario Heiderich 1661362000 +0200 committer Mario Heiderich 1661362000 +0200 fix: Removed bundled types entirely due to 3rd party build errors )Vx tree 7c7ae77c06490c2fd98c6447ace26714c759d119 parent ddff426b8850c709c5336f1e30281c9cb9ce44bb author Mario Heiderich 1661268991 +0200 committer Mario Heiderich 1661268991 +0200 chore: prepare 2.3.12 release Hxtree 47be975e825caaf80a07f7c6df0e11ab7b43f15e parent a25a97ae2fd717bc96bb3755ade622bfd58abce3 author Mario Heiderich 1661266231 +0200 committer Mario Heiderich 1661266231 +0200 See #712 fix: marked cfg for sanitize() as optional / default param aW x tree a18d3b0acfc5874907385a0689ce341db762fc8f parent c7fb4fce7c76e883a0dc0a1972731c5aa2b7907c author Mario Heiderich 1661246199 +0200 committer Mario Heiderich 1661246199 +0200 chore: prepare 2.3.11 release wHxtree 592be5428167b34c689182a8a900a8648653d92b parent a46b66c8a96b699d62bc2c12bed7713c2874feb6 author Mario Heiderich 1660728162 +0200 committer Mario Heiderich 1660728162 +0200 docs: Updated README and added new contributor kNTxitree b0abeebb8d67b8aee0dd01f42cbffc8d58e38d3e parent faddf3170afdbfff787a7af2a1f689a6fdd01c01 parent 7963df7e94f1a750cf6bdac2610676e40d3cfac1 author Cure53 1660720085 +0200 committer GitHub 1660720085 +0200 Merge pull request #710 from SoheilKhodayari/main Extra DOM Clobbering protection via SANITIZE_NAMED_PROPS confignr x8tree b0abeebb8d67b8aee0dd01f42cbffc8d58e38d3e parent faddf3170afdbfff787a7af2a1f689a6fdd01c01 author Soheil Khodayari 1660673133 +0200 committer Soheil Khodayari 1660673133 +0200 Extra DOM Clobbering protection via SANITIZE_NAMED_PROPS config f,x tree 76780c453afdea1a92d4b01f6cfa7675f7b46707 parent 57fe6a5efb696887df62dec46386b38091c9dd8b author Cure53 1660401469 +0200 committer GitHub 1660401469 +0200 docs: Added instructions for Angular, see #705HIxitree c1af3cdd36e1817ad7527b2e70df52a98a90a2ea parent ad2ed22354e41c91d0deff0a3962f69cb081081c author Mario Heiderich 1660400332 +0200 committer Mario Heiderich 1660400332 +0200 chore: Added new npm script "types" to create type definitions chore: Made sure that type definitions are created in ./dist chore: Added type definition files to git via commit-amend-build.sh DxZtree 8a7c364c8dea606d0f71a78d2d3d8164a184f563 parent 78f46f28961abae47bb24df4b51c3435944354f9 parent e70ca85bfeb07918af1baadafb7a36430291ac1d author Cure53 1660207079 +0200 committer GitHub 1660207079 +0200 Merge pull request #709 from 0xedward/docs-FORBID_CONTENTS Add documentation for `FORBID_CONTENTS`hxXtree 8a7c364c8dea606d0f71a78d2d3d8164a184f563 parent dbf7aadf226d2e47af7b384fc3bbb24bb09385ce parent 78f46f28961abae47bb24df4b51c3435944354f9 author Edward <14011954+0xedward@users.noreply.github.com> 1660174342 -0700 committer Edward <14011954+0xedward@users.noreply.github.com> 1660174342 -0700 Merge branch 'main' into docs-FORBID_CONTENTS hh xtree 75b1d6e64567c612586b86a0f47c6455a133e4df parent ff17cddcb669480e2b98874735de85e086946195 author Mario Heiderich 1660147484 +0200 committer Mario Heiderich 1660147484 +0200 docs: did some minor updates to README OK1xtree d76b7f1ee71e660601e5e6925e97d23a55de93a9 parent 5633936bcfc49d7cfe38d465fc0b6fb8a59b3c6b author Mario Heiderich 1660137995 +0200 committer Mario Heiderich 1660137995 +0200 test: Made sure BS tests use Node 18 uKxtree 373094b9e38c677e55fcfa0a4beb9125d2a8ca2d parent 756d723ace929bc1e28eb9670de60e1ecf2e6620 author Mario Heiderich 1660137946 +0200 committer Mario Heiderich 1660137946 +0200 docs: Did some finetuning to README, removed some overhead MTxtree f1ba33cb33e6dcb01f2f80813c7dbfdc4884d25a parent d9b36441adb9f9beecc2b75dfa7701933d263aad author Mario Heiderich 1660137759 +0200 committer Mario Heiderich 1660137759 +0200 test: added current Node version numbers .'Ovxtree 831407772a7753c9e5ec048932a66fc16ec7c12a parent 05c2cdb17acd09143fa0a4297fd5d99b04d0490d author Mario Heiderich 1660137581 +0200 committer Mario Heiderich 1660137581 +0200 test: Added newer Node versions to test workflow Pcxtree 6fad8045e7adbf4a0028ed2269fa87939de881d4 parent 707faa6c33e6c12fafc5469de30e79e7344fccff author Mario Heiderich 1660137295 +0200 committer Mario Heiderich 1660137295 +0200 docs: Updated readme for better Node usage instructions Txotree 0e97af70edcc47a0f54e70bfe75a013f7ae237e6 parent 0ff3e24d73491d3b5a8304929393118b217d8e84 parent f05d57acda54f330303049592be77e5c8149e492 author Cure53 1658307422 +0200 committer GitHub 1658307422 +0200 Merge pull request #701 from cure53/dependabot/npm_and_yarn/terser-5.14.2 build(deps): bump terser from 5.5.1 to 5.14.2%m*xRtree 0e97af70edcc47a0f54e70bfe75a013f7ae237e6 parent 0ff3e24d73491d3b5a8304929393118b217d8e84 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1658285790 +0000 committer GitHub 1658285790 +0000 build(deps): bump terser from 5.5.1 to 5.14.2 Bumps [terser](https://github.com/terser/terser) from 5.5.1 to 5.14.2. - [Release notes](https://github.com/terser/terser/releases) - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](https://github.com/terser/terser/commits) --- updated-dependencies: - dependency-name: terser dependency-type: indirect ... Signed-off-by: dependabot[bot] /rx tree 5e3e8c7834f171ab60f4b3e30fbbabf4b80c87d3 parent f96e778e06027f0ea629b5028523089879844c71 author Dr.-Ing. Mario Heiderich 1658246772 +0200 committer Dr.-Ing. Mario Heiderich 1658246772 +0200 docs: added new sponsors to README Ox tree ba6833b28ea66b49f2fbcfa20e91b8f2e2ea7c5f parent 443c2337a44ff9d630e83833482517977a52c061 author Mario Heiderich 1658149258 +0200 committer Mario Heiderich 1658149258 +0200 chore: preparing 2.3.10 release 7Ixhtree 8272d6beb53a75a1021aa0087e6aa9a1c34e87ed parent 91ba10c10784c68f69c5d374783e03739f25d479 parent 98997bcedad1ce51441509d5c95aeda560d6eadf author Cure53 1658147796 +0200 committer GitHub 1658147796 +0200 Merge pull request #699 from tosmolka/tosmolka/660 Support sanitization of attributes that require Trusted Types+{pxtree 8272d6beb53a75a1021aa0087e6aa9a1c34e87ed parent 91ba10c10784c68f69c5d374783e03739f25d479 author Tobias Smolka 1658146357 +0200 committer Tobias Smolka 1658146357 +0200 Support sanitization of attributes that require Trusted Types [xtree 6dd47458ccf661802e2b11708270dd53f32e8dff parent 6f52ad46963807e62b698e22dd2657af4fbccaf5 author Mario Heiderich 1657541959 +0200 committer Mario Heiderich 1657541959 +0200 chore: Updated website "GZx tree 0516edcff7a6a200839e99a273d37559bcaeccfb parent e55ce38c5db155b26b5e4ebc9b97995f06eb4f7d author Mario Heiderich 1657541921 +0200 committer Mario Heiderich 1657541921 +0200 chore: Preparing 2.3.9 release tJRxwtree f0653e212ee737a0d7683b2879f43f674de8ff13 parent 0786cec6b87a321a5dc73a4491b94fbcf7998a9c parent 57538c7aa3d9481cdfabf64713c02e9ac49db249 author Cure53 1656056669 +0200 committer GitHub 1656056669 +0200 Merge pull request #695 from cure53/dependabot/npm_and_yarn/shell-quote-1.7.3 build(deps): bump shell-quote from 1.7.2 to 1.7.3rw/xtree f0653e212ee737a0d7683b2879f43f674de8ff13 parent 0786cec6b87a321a5dc73a4491b94fbcf7998a9c author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1655975636 +0000 committer GitHub 1655975636 +0000 build(deps): bump shell-quote from 1.7.2 to 1.7.3 Bumps [shell-quote](https://github.com/substack/node-shell-quote) from 1.7.2 to 1.7.3. - [Release notes](https://github.com/substack/node-shell-quote/releases) - [Changelog](https://github.com/substack/node-shell-quote/blob/master/CHANGELOG.md) - [Commits](https://github.com/substack/node-shell-quote/compare/v1.7.2...1.7.3) --- updated-dependencies: - dependency-name: shell-quote dependency-type: indirect ... Signed-off-by: dependabot[bot] x1tree 774a02f6571c9cdca282c7c24c64073bc9f736e2 parent 9438be20265457dd513bb9237ce8ae2a267e33c0 parent be32abbe9fbfeb7925051db27b9724b8b3ee785b author Cure53 1655037080 +0200 committer GitHub 1655037080 +0200 Merge pull request #693 from is2ei/run-format format code+[xtree 774a02f6571c9cdca282c7c24c64073bc9f736e2 parent 9438be20265457dd513bb9237ce8ae2a267e33c0 author Issei Horie 1655035777 +0900 committer Issei Horie 1655035777 +0900 format code Dxtree 48f96cd0270afbdde3167cf8f86c2824dc38ec88 parent 542feafa14caffddf89616688284fced4d5176c9 author Dr.-Ing. Mario Heiderich 1654519243 +0200 committer Dr.-Ing. Mario Heiderich 1654519243 +0200 See #692 test: Fixed a test in Edge 17 Pxtree bbbdeb90f239334939cd4700d8341d1936dceefd parent 92d79a732e5742edeaa28199427b8c701f86e88d author Mario Heiderich 1654516936 +0200 committer Mario Heiderich 1654516936 +0200 See #692 fix: disable colliding linter rule 'Mxvtree 0be5a7fa3e64b62da30be3bbd13db77f70577ae5 parent 39d8183b66d951dd4f57a190108c24415c1d3123 parent 1e169cf338493c6b703e8e2dfa396191a0dd7a60 author Cure53 1654516094 +0200 committer GitHub 1654516094 +0200 Merge pull request #692 from tosmolka/tosmolka/xhtml-lowercase Make TAG and ATTR cfg options case-sensitive when parsing XHTMLntx tree 0be5a7fa3e64b62da30be3bbd13db77f70577ae5 parent 39d8183b66d951dd4f57a190108c24415c1d3123 author Tobias Smolka 1654515012 +0200 committer Tobias Smolka 1654515012 +0200 Make TAG and ATTR cfg options case-sensitive when parsing XHTML AZ-xtree 7bb2f12ba4ff12a2be2655839f368f2c699c2700 parent 0dce2bb4cbc208352b6f988c25b36d6b01b8d972 parent 5ac4a2cc331405236a273145396faa580451cd1c author Cure53 1653489163 +0200 committer GitHub 1653489163 +0200 Merge pull request #690 from cure53/dependabot/github_actions/github/codeql-action-2 build(deps): bump github/codeql-action from 1 to 2vחxwtree 60c3485091df3f1fe2ebea7ca9a06c65e219ae0e parent d92763c6839cf0e14c5e34f89fff67c604bc4da6 parent ae0cd9d4074c262594815a63552516c4d4e8a727 author Cure53 1653489157 +0200 committer GitHub 1653489157 +0200 Merge pull request #689 from cure53/dependabot/github_actions/actions/checkout-3 build(deps): bump actions/checkout from 2 to 3>Ltx{tree 8ed139f034180c71af2ca3f874b3e0387131dbea parent 224b53b2ca21e8fa047c94be4326835461c6fc7b parent c1b20c26d1057cb164045e5cd866a1d03e88d411 author Cure53 1653489144 +0200 committer GitHub 1653489144 +0200 Merge pull request #688 from cure53/dependabot/github_actions/actions/setup-node-3 build(deps): bump actions/setup-node from 2 to 3usxxtree c82e248ac1761b4758857faa34ff35d1aca4d7c1 parent 1020045e8336bad9186cd40c58c1fb3d375cb73b parent 28804732164789642eb9e9ba3189807cfade94d6 author Cure53 1653489132 +0200 committer GitHub 1653489132 +0200 Merge pull request #687 from cure53/dependabot/github_actions/GabrielBB/xvfb-action-1.6 build(deps): bump GabrielBB/xvfb-action from 1.0 to 1.6Nw1xtree 81885813688ddb2a07a2a20717c53bb46aa3437f parent 1020045e8336bad9186cd40c58c1fb3d375cb73b author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1653488697 +0000 committer GitHub 1653488697 +0000 build(deps): bump github/codeql-action from 1 to 2 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v1...v2) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot]  ۟/xtree efd5bfbd8a5ee4f60981bad94bf6462731ff5ae2 parent 1020045e8336bad9186cd40c58c1fb3d375cb73b author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1653488694 +0000 committer GitHub 1653488694 +0000 build(deps): bump actions/checkout from 2 to 3 Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Ց,x>tree 0ac8fdd348e8ce15399d487ed69c789174fdfe7d parent 1020045e8336bad9186cd40c58c1fb3d375cb73b author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1653488691 +0000 committer GitHub 1653488691 +0000 build(deps): bump actions/setup-node from 2 to 3 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2 to 3. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Nş-x tree c82e248ac1761b4758857faa34ff35d1aca4d7c1 parent 1020045e8336bad9186cd40c58c1fb3d375cb73b author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1653488688 +0000 committer GitHub 1653488688 +0000 build(deps): bump GabrielBB/xvfb-action from 1.0 to 1.6 Bumps [GabrielBB/xvfb-action](https://github.com/GabrielBB/xvfb-action) from 1.0 to 1.6. - [Release notes](https://github.com/GabrielBB/xvfb-action/releases) - [Commits](https://github.com/GabrielBB/xvfb-action/compare/v1.0...v1.6) --- updated-dependencies: - dependency-name: GabrielBB/xvfb-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] xotree 33527578ed41cbae0bcd88c939e800d75079c2ee parent 75ba0b7a5d11dac44015280fe83be097bf3be1f1 parent 95f7dfd744745bf264da6dd60652254639b9e459 author Cure53 1653488666 +0200 committer GitHub 1653488666 +0200 Merge pull request #685 from turrisxyz/Dependabot-GitHub-Actions chore: Included githubactions in the dependabot configeHs)5x\tree 33527578ed41cbae0bcd88c939e800d75079c2ee parent 75ba0b7a5d11dac44015280fe83be097bf3be1f1 author nathannaveen <42319948+nathannaveen@users.noreply.github.com> 1653354460 +0000 committer nathannaveen <42319948+nathannaveen@users.noreply.github.com> 1653354460 +0000 chore: Included githubactions in the dependabot config This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure. Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com> ],x0tree 3b9281ac2f2a151601ccb790aa80a59eaab995ee parent 1f3d964b4f9d4c0fd8f83759f76c2ec46b5c8d0c author Mario Heiderich 1652449870 +0200 committer Mario Heiderich 1652449870 +0200 chore: Prepared 2.3.8. release fix: Cleaned up a minor mess with 2.3.7, thanks @johnbirds Ѓ]x tree d1f047b4bdcdc5991eafa5fb70a1dc136f8a5f78 parent 53cb0e9a9b51d6dd3a2eecda783cf372729938ee author Mario Heiderich 1652285303 +0200 committer Mario Heiderich 1652285303 +0200 chore: Preparing 2.3.7. release |Jxtree 96ab971a1bf9541dd42efe1eaae4df88a15df491 parent 4511958d8a110771abffdd13dec203f8a51006aa author Mario Heiderich 1652283831 +0200 committer Mario Heiderich 1652283831 +0200 fix: Added an experimental fix for a WebKit engine bug, thanks @sybrew OXx=tree 80bd7088d5fc963b3bb12430288bb3f7444888bd parent 37c02303428e4f46134219f0932699f3ae4fe639 parent 832af94e70edc8b7c0652d5767271a23c45753a4 author Cure53 1652269046 +0200 committer GitHub 1652269046 +0200 Merge pull request #679 from is2ei/fix-typo chore: fix typo in README\xYtree 8fd47bea47cc877f3d8caf6cc5bb5c2bd7d8ad18 parent e0f403e98a8924c4d492b862a9755ce1e2b5fe3b parent 12474fa505068f2bfa27e977343221b94e30b846 author Cure53 1652269027 +0200 committer GitHub 1652269027 +0200 Merge pull request #680 from tiny-ben-tran/performance-improvement Minor performance improvements{lZxtree 8fd47bea47cc877f3d8caf6cc5bb5c2bd7d8ad18 parent b5b95bedb8b80e5beca92bcf113e421c3b18e8a9 author Ben Tran 1652248226 +0930 committer Ben Tran 1652248226 +0930 Capitalised const variable name ^K^x,tree 8baac1a3531ba9eac18353c90e9cbf3857f1b358 parent 598b1fb5d833fc881546ad21985128db7489a808 author Ben Tran 1652244063 +0930 committer Ben Tran 1652244063 +0930 Moved commonSvgAndHTMLElements out so _checkValidNamespace doesn't re-created in every call 0^xtree 1c6c176e629468ad9e117569876b7cb6c6b12f42 parent e0f403e98a8924c4d492b862a9755ce1e2b5fe3b author Ben Tran 1652242101 +0930 committer Ben Tran 1652242101 +0930 Minor performance improvements Hx tree 2312ccc52c2a63ea8230adbf6501107537c873f6 parent e0f403e98a8924c4d492b862a9755ce1e2b5fe3b author Issei Horie 1652176606 +0900 committer Issei Horie 1652176606 +0900 chore: fix typo in README Hx3tree 73c627b5f45611057540e24239db41fad9501ef8 parent 25b14b595cd8ca27b5867cb9f3da2d7947155841 parent af9f0dc5981b49103c81bbcf1fdb6c124a4967b5 author Cure53 1652162985 +0200 committer GitHub 1652162985 +0200 Merge pull request #678 from is2ei/fix-typo chore: fix typo%[wxtree 73c627b5f45611057540e24239db41fad9501ef8 parent 25b14b595cd8ca27b5867cb9f3da2d7947155841 author Issei Horie 1651851356 +0900 committer Issei Horie 1651851356 +0900 chore: fix typo M.Exxtree 1e1b3648c96d84a5878248c26d935333672eb386 parent 33e594eab2193a1be612572aec4aaf678c940602 author Mario Heiderich 1651822080 +0200 committer Mario Heiderich 1651822080 +0200 docs: Added new conributors to README Jx[tree 4d0c0b6192e8464719125a2fba068a69bb46fb37 parent 1a969523d676432cba400fb1171de33df76a0c5c parent ee112d44cdb8f49d1b750d7cd6b03bc6081b1518 author Cure53 1651508705 +0200 committer GitHub 1651508705 +0200 Merge pull request #676 from is2ei/update-pull-request-template chore: update pull request templateZkXxtree 4d0c0b6192e8464719125a2fba068a69bb46fb37 parent 1a969523d676432cba400fb1171de33df76a0c5c author Issei Horie 1650978268 +0900 committer Issei Horie 1650978609 +0900 chore: update pull request template kMΚxZtree a125c4a68ca1a6828d4b9796333d12f852e906ac parent 950da391d6f7a23a92be42d10d9fe01a0a5312b3 parent 57b81b9b146137285b76df3bc2eb7634452c7efd author Cure53 1650816928 +0200 committer GitHub 1650816928 +0200 Merge pull request #674 from is2ei/update-bugbounty-link chore: update the link to bug bounty pagebjxtree a125c4a68ca1a6828d4b9796333d12f852e906ac parent 950da391d6f7a23a92be42d10d9fe01a0a5312b3 author Issei Horie 1650816024 +0900 committer Issei Horie 1650816024 +0900 chore: update the link to bug bounty page `-O_x7tree e53020cb04dd0ed90b40e33d6e62966bcb53d078 parent 7bce13afc9f218dba862e8572ce6348a7fb9b5f9 parent edd687d402f2ced05d180e88492f25cfd132ffc1 author Cure53 1650812905 +0200 committer GitHub 1650812905 +0200 Merge pull request #669 from is2ei/bump-karma chore: bump karma'^pxtree e53020cb04dd0ed90b40e33d6e62966bcb53d078 parent 7bce13afc9f218dba862e8572ce6348a7fb9b5f9 author Issei Horie 1649516123 +0900 committer Issei Horie 1649516123 +0900 chore: bump karma AGǕxutree 4031b940d48fb94ceea7b67065dc40a32c4e4a28 parent be7aeb1c60c4cf25838d7552a35b401ac612b83e parent c68de26f9478e02de71e9453d3d2c5af8ae15574 author Cure53 1648556270 +0200 committer GitHub 1648556270 +0200 Merge pull request #668 from cure53/dependabot/npm_and_yarn/minimist-1.2.6 build(deps-dev): bump minimist from 1.2.5 to 1.2.6q)xotree 4031b940d48fb94ceea7b67065dc40a32c4e4a28 parent be7aeb1c60c4cf25838d7552a35b401ac612b83e author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1648555361 +0000 committer GitHub 1648555361 +0000 build(deps-dev): bump minimist from 1.2.5 to 1.2.6 Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. - [Release notes](https://github.com/substack/minimist/releases) - [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6) --- updated-dependencies: - dependency-name: minimist dependency-type: direct:development ... Signed-off-by: dependabot[bot] Xx9tree 97c21cceff534f01ed3b2401b128ed7f4a79ae2b parent 27cdd83ba14433457f29cdfcb28a10679d3a8414 parent 5391523ca59dd0a1e205f512579f191e0dc11ba0 author Cure53 1648555317 +0200 committer GitHub 1648555317 +0200 Merge pull request #667 from is2ei/bump-rollup chore: bump rollup!k^xtree 97c21cceff534f01ed3b2401b128ed7f4a79ae2b parent 27cdd83ba14433457f29cdfcb28a10679d3a8414 author Issei Horie 1648402700 +0900 committer Issei Horie 1648450008 +0900 chore: bump rollup F+HxAtree d91b9bb6717b0bba2b1bbf2ce139fdd86069aad9 parent fa1956fae206ef3e8053dc8b1dcd4a9b9fd45766 parent 42d951e14f6598b01be1be92f8f23c07a2473995 author Cure53 1648022614 +0100 committer GitHub 1648022614 +0100 Merge pull request #666 from is2ei/fix-link-to-amd chore: fix link to AMDAa:xtree d91b9bb6717b0bba2b1bbf2ce139fdd86069aad9 parent fa1956fae206ef3e8053dc8b1dcd4a9b9fd45766 author Issei Horie 1648019320 +0900 committer Issei Horie 1648019320 +0900 chore: fix link to AMD AgIّxQtree fb8887c32220e31442dc086a2a2aa33147a39860 parent aceeb716cb69ba7d8572210d2f43a44d80990d38 parent cbb8d0c5908c07d99585263baf302027abb895d3 author Cure53 1647972379 +0100 committer GitHub 1647972379 +0100 Merge pull request #665 from is2ei/fix-link-to-trusted-api chore: fix link to trusted apiX!f5xtree fb8887c32220e31442dc086a2a2aa33147a39860 parent aceeb716cb69ba7d8572210d2f43a44d80990d38 author Issei Horie 1647567212 +0900 committer Issei Horie 1647567212 +0900 chore: fix link to trusted api K$xYtree b76815e57cc197d7012bf47fedd758f949f6b13d parent 6041a668b0d60214273be9d15f5a8208c2d5b117 parent 6c4af9d03d35a6e32132cb029ac7b3e88b81b3c9 author Cure53 1647419794 +0100 committer GitHub 1647419794 +0100 Merge pull request #663 from is2ei/fix-link-to-bug-bounty-info chore: fix link to bug bounty infoiyxtree b76815e57cc197d7012bf47fedd758f949f6b13d parent 6041a668b0d60214273be9d15f5a8208c2d5b117 author Issei Horie 1647347532 +0900 committer Issei Horie 1647347532 +0900 chore: fix link to bug bounty info Lx5tree 8c7655c449f0fbdc9b47f110bafbe331e671bbd5 parent 05fffdbaffe9ae579aec23a84d29b8884ef3774a parent 0cbc7983dbd0560e09f1c4220ad5d5311e7c66d2 author Tobias Deekens 1647330027 +0100 committer GitHub 1647330027 +0100 Merge pull request #662 from is2ei/fix-link-jsdom _x tree 8c7655c449f0fbdc9b47f110bafbe331e671bbd5 parent 05fffdbaffe9ae579aec23a84d29b8884ef3774a author Issei Horie 1647324790 +0900 committer Issei Horie 1647324790 +0900 chore: fix link to jsdom KJxRtree a376095d68510c9c08fa12a3523b9e1841d75e3c parent 698624ac52870f7c34d7df464392fabf35f61f22 parent a01178db50300086ded6185d97aa25cedbacbe78 author Cure53 1647183292 +0100 committer GitHub 1647183292 +0100 Merge pull request #661 from is2ei/bump-eslint-config-prettier bump eslint-config-prettierhx tree a376095d68510c9c08fa12a3523b9e1841d75e3c parent 698624ac52870f7c34d7df464392fabf35f61f22 author Issei Horie 1647181490 +0900 committer Issei Horie 1647181490 +0900 bump eslint-config-prettier hJxItree e5e5442db71275886306fee13c287982fb3f71da parent 4ac8840c40aa54d233bb4e90a49eabed87bafd32 parent 7de8d43bac86de3278b75898734602abeb14f502 author Cure53 1646642034 +0100 committer GitHub 1646642034 +0100 Merge pull request #659 from christopherehlen/main Stop trimming value attributesxeŔxtree e5e5442db71275886306fee13c287982fb3f71da parent 7140bb0c472a684fcad1d5f6ea26cef3770d70c5 parent 4ac8840c40aa54d233bb4e90a49eabed87bafd32 author Cure53 1646641715 +0100 committer GitHub 1646641715 +0100 Merge branch 'main' into mainR8xOtree 57d6243397df0086a65003837cc0bc8b9ac4c7a9 parent 1600dd7eede4d6b86736d903ad2466bfaccdcf6d parent 0dde8c52bcff8ecfe6898eda73dc4ae5cbe2fee4 author Cure53 1646567329 +0100 committer GitHub 1646567329 +0100 Merge pull request #658 from is2ei/656-return-removed-hook-function return removed hook4i\xtree 57d6243397df0086a65003837cc0bc8b9ac4c7a9 parent 1600dd7eede4d6b86736d903ad2466bfaccdcf6d author Issei Horie 1646566934 +0900 committer Issei Horie 1646566934 +0900 return removed hook Ix2tree 47a996e38a102fee0174f6b3760dba22b617dcf0 parent c07d7c35ace882c177f060d64a951c8c7bc08cd3 parent c99f361187705079baf2e8d9b23f218f3be20e9a author Cure53 1646058102 +0100 committer GitHub 1646058102 +0100 Merge pull request #655 from is2ei/format chore: format jsx[xtree 47a996e38a102fee0174f6b3760dba22b617dcf0 parent c07d7c35ace882c177f060d64a951c8c7bc08cd3 author Issei Horie 1646057255 +0900 committer Issei Horie 1646057255 +0900 chore: format js {EGx7tree 301a9d030d058dedf18e34c082cc80b0a437e506 parent df8c6db35fcfd525e917c4030ec8fed043c6e1aa parent c2c073cd4a5a4e9ed5bed410735d9d5eb4fe9eae author Cure53 1645713172 +0100 committer GitHub 1645713172 +0100 Merge pull request #654 from is2ei/bump-karma chore: bump karmav_6xtree 301a9d030d058dedf18e34c082cc80b0a437e506 parent df8c6db35fcfd525e917c4030ec8fed043c6e1aa author Issei Horie 1645635199 +0900 committer Issei Horie 1645635199 +0900 chore: bump karma GxDtree d9f3c8a0a332c4ece8bd0e8e75ab86d07916c730 parent d0f177c786aa7a9c5fa3dc23488f7977ffdad3e9 parent ab604b1aeb66cb77cc5d9c15e09285319a79687c author Cure53 1645625650 +0100 committer GitHub 1645625650 +0100 Merge pull request #653 from is2ei/remove-he chore: remove unused package heicdxtree d9f3c8a0a332c4ece8bd0e8e75ab86d07916c730 parent d0f177c786aa7a9c5fa3dc23488f7977ffdad3e9 author Issei Horie 1645624819 +0900 committer Issei Horie 1645624819 +0900 chore: remove unused package he Mx7tree 441a64ce335e364b3e9ca0b96f7270a4f00b95ec parent dae767fa41e0b2448b2fa56acb4f1a1492273625 parent e3a2e12e028c3224ceefa17bf580fda9fb313746 author Cure53 1645349151 +0100 committer GitHub 1645349151 +0100 Merge pull request #652 from is2ei/bump-jsdom chore: bump jsdom]ќxtree 441a64ce335e364b3e9ca0b96f7270a4f00b95ec parent dae767fa41e0b2448b2fa56acb4f1a1492273625 author Issei Horie 1645327482 +0900 committer Issei Horie 1645327482 +0900 chore: bump jsdom BG6x tree 9b8319fbcf1075cd9d87e1173b73f6a0cda58e22 parent 4fcc93352c99c084f72a8382bc43e415c4ec0c74 author Mario Heiderich 1644995778 +0100 committer Mario Heiderich 1644995778 +0100 chore: preparing 2.3.6 release Icxtree 50b3fb33a0cdb0231c3eeca00755fcc10eb8322c parent dcabae5a37df4b6d92d4c6c23e9aac5724a7e2b6 author Mario Heiderich 1644933653 +0100 committer Mario Heiderich 1644933653 +0100 chore: added missing eslint exception >NzxGtree 54c50b504c935ef2686de016b623d1417dcdfdcc parent d868a1cb764e59d02594bfe6f358fed92364e59f parent a8bf1c10dcf9778b17172c42548fef7cc0dc1744 author Cure53 1644933443 +0100 committer GitHub 1644933443 +0100 Merge pull request #651 from tosmolka/tosmolka/fix-doctype Tosmolka/fix doctypee'xItree 7688aadcaa52ec88e16bc56bb7b688e6cd71869a parent bf1982e0ac36875889f0b220a62ad5aeae21889a parent 017db46b6c5b20d5df7f310c7d303ec1ce0b4602 author Cure53 1644932850 +0100 committer GitHub 1644932850 +0100 Merge pull request #650 from is2ei/fix-unused-variable chore: use unused variable eCx tree 7688aadcaa52ec88e16bc56bb7b688e6cd71869a parent bf1982e0ac36875889f0b220a62ad5aeae21889a author Issei Horie 1644853886 +0900 committer Issei Horie 1644853886 +0900 chore: use unused variable 5Kx tree 92c2b36b17956021ceffef0baa853e0e88cca658 parent 886a68a4272f9d8e75cce98ee4038843dbd0dbd3 author Tobias Smolka 1644832338 +0100 committer Tobias Smolka 1644832338 +0100 Revert formatting in test/fixtures/expect.js VOx tree c75cb5cf80dde7d4369585142f73e616f19a0c44 parent ab3335ad339645801407ba354e781dd524d0ddcf author Tobias Smolka 1644831722 +0100 committer Tobias Smolka 1644831730 +0100 Build new version PJxtree fe1f0f708788d79bfc108da43f8c893b4bb3ed3f parent 7b85b95284593ebaf9eec221c11c829b91e8fbac author Tobias Smolka 1644831710 +0100 committer Tobias Smolka 1644831710 +0100 Fix lint error oJؕxetree 9e253153907b8a7bba80c02aec7f9c87573217d9 parent a3535739161e6a3bf2a32cc536fb8245835e3062 parent bf1982e0ac36875889f0b220a62ad5aeae21889a author Tobias Smolka 1644831632 +0100 committer Tobias Smolka 1644831632 +0100 Merge branch 'main' of https://github.com/cure53/DOMPurify into tosmolka/fix-doctype .oCxtree 5338ae5b13ba8017ca1905c06d4fd39320697da1 parent 9fa4814372c38c5fa7d088b2731e11338cb41d00 author Tobias Smolka 1644831054 +0100 committer Tobias Smolka 1644831054 +0100 Allow only html doctype LExCtree 9ab89e0c88bcb6eaeb915973453c622d379e00a3 parent 660d84ddaef94eee583006ba9a58bcc57eb91694 parent 911d8108aec1257cf343bd680d75ac0c48dd200a author Cure53 1644822613 +0100 committer GitHub 1644822613 +0100 Merge pull request #648 from is2ei/fix-test-on-IE11 chore: fix test on IE11)b`x tree 9ab89e0c88bcb6eaeb915973453c622d379e00a3 parent 660d84ddaef94eee583006ba9a58bcc57eb91694 author Issei Horie 1644799455 +0900 committer Issei Horie 1644799455 +0900 chore: fix test on IE11 ȘI!x7tree 761a1c8770296bdf05b8608447a1f20f80153fcf parent a1bb8b7070c8cce8120ba9a21726f3b5755a42b4 parent 17c55fb2968e42a8609fe1d7f2a242f7f2a01dd8 author Cure53 1644769877 +0100 committer GitHub 1644769877 +0100 Merge pull request #647 from is2ei/bump-qunit chore: bump qunit]Hxtree 761a1c8770296bdf05b8608447a1f20f80153fcf parent a1bb8b7070c8cce8120ba9a21726f3b5755a42b4 author Issei Horie 1644724567 +0900 committer Issei Horie 1644763953 +0900 chore: bump qunit and upgrade tests ksMrx{tree bde8951804bed4be230e5d958816a3a8d28dfc5a parent 6426a88f147ac758d1f71ff40bf1bb451312d9d2 parent 3fabc5054e85a317f456de17e15134cdb71a32dc author Cure53 1644678794 +0100 committer GitHub 1644678794 +0100 Merge pull request #646 from cure53/dependabot/npm_and_yarn/follow-redirects-1.14.8 build(deps): bump follow-redirects from 1.13.1 to 1.14.8;wY-x-tree bde8951804bed4be230e5d958816a3a8d28dfc5a parent 6426a88f147ac758d1f71ff40bf1bb451312d9d2 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1644678049 +0000 committer GitHub 1644678049 +0000 build(deps): bump follow-redirects from 1.13.1 to 1.14.8 Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.13.1 to 1.14.8. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.13.1...v1.14.8) --- updated-dependencies: - dependency-name: follow-redirects dependency-type: indirect ... Signed-off-by: dependabot[bot] ʟ9xtree 72976b640a3d9b62c3def5d5d0db3bc6cd41dec5 parent 78df7ceb793c07eaeabfcc7fa110c7dd77bf0d52 author Mario Heiderich 1644677981 +0100 committer Mario Heiderich 1644677981 +0100 chore: added a missing eslint-disable-next-line comment nUxCtree 725f2e174315c0a1e6a1af1615192ee88c8e2fd1 parent c490bb02e1b299eed98503daeef50e9cf305b569 parent 3ec7c2a4141e5e9779004b4adf8b8293a659d3be author Mario Heiderich 1644676103 +0100 committer Mario Heiderich 1644676103 +0100 Merge branch 'main' of github.com:cure53/DOMPurify into main WaΚx*tree 72d43b653f8c57c41398601d9cc650e2f61f25ca parent b39b51dc4ee2adb5ef317a85aace9f522be4a1fe author Mario Heiderich 1644676009 +0100 committer Mario Heiderich 1644676009 +0100 See #645 fix: Addressed an issue with improper content cloning for custom elements ]gx1tree b5ffb5cedaf97d54c12b4a558a2d97de08be6cab parent 91b03fa463b2050a3673def266e552ff617a4ddb parent 226d691e9b0eb6b7002009db62ea3350ffccaae6 author Cure53 1644594749 +0100 committer GitHub 1644594749 +0100 Merge pull request #644 from is2ei/bump-xo chore: bump xom\יxtree b5ffb5cedaf97d54c12b4a558a2d97de08be6cab parent 91b03fa463b2050a3673def266e552ff617a4ddb author Issei Horie 1644592843 +0900 committer Issei Horie 1644593860 +0900 chore: bump xo kGextree 03eb8a6b7a3e6f8488c4a4382be7d5381a9d8c78 parent ee23ff2e11a1e428ee9f885e5f6d19ddb245d69d author Tobias Smolka 1644589748 +0100 committer Tobias Smolka 1644589748 +0100 Serialize !doctype name only Oxetree f6eb3016cce464f8fd2185e629c3df82946830a5 parent 3c2c132e8b1536218dc530a183e29b510f0fb398 parent 91b03fa463b2050a3673def266e552ff617a4ddb author Tobias Smolka 1644586178 +0100 committer Tobias Smolka 1644586178 +0100 Merge branch 'main' of https://github.com/cure53/DOMPurify into tosmolka/fix-doctype oxtree 606230e0dc2d0fff04bb2ad780c37a298950ac02 parent 2af4ee59674fa6fcd6c684f87ebfd67f34871fc9 author Tobias Smolka 1644586121 +0100 committer Tobias Smolka 1644586121 +0100 Fix attempt without XMLSerializer [Q̝x=tree 11aba24a6be5776cc892b82ac0070d9fb9884fe2 parent 25de38534071ef3069918b8eb345324251838a0a parent d22d23777fd109e1cbd1f78aa53826818172c156 author Cure53 1644584638 +0100 committer GitHub 1644584638 +0100 Merge pull request #642 from is2ei/bump-prettier chore: bump prettierY-^˟xtree 11aba24a6be5776cc892b82ac0070d9fb9884fe2 parent 25de38534071ef3069918b8eb345324251838a0a author Issei Horie 1644583563 +0900 committer Issei Horie 1644583563 +0900 chore: bump prettier Gxqtree 9c6774f25298a7ffa3f6abd53e4755878812c3c2 parent b39b51dc4ee2adb5ef317a85aace9f522be4a1fe parent d17c0adad6ad40d6a4edd10ac6b914a4e7093bdd author Cure53 1644582881 +0100 committer GitHub 1644582881 +0100 Merge pull request #643 from cure53/dependabot/npm_and_yarn/karma-6.3.14 build(deps-dev): bump karma from 5.2.3 to 6.3.14qA-x"tree 9c6774f25298a7ffa3f6abd53e4755878812c3c2 parent b39b51dc4ee2adb5ef317a85aace9f522be4a1fe author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1644581774 +0000 committer GitHub 1644581774 +0000 build(deps-dev): bump karma from 5.2.3 to 6.3.14 Bumps [karma](https://github.com/karma-runner/karma) from 5.2.3 to 6.3.14. - [Release notes](https://github.com/karma-runner/karma/releases) - [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md) - [Commits](https://github.com/karma-runner/karma/compare/v5.2.3...v6.3.14) --- updated-dependencies: - dependency-name: karma dependency-type: direct:development ... Signed-off-by: dependabot[bot] R%!x tree 14914f9819f694b0ca21ddf2d11937c71a97fcb2 parent b39b51dc4ee2adb5ef317a85aace9f522be4a1fe author Tobias Smolka 1644574053 +0100 committer Tobias Smolka 1644574053 +0100 Fix propsal: WHOLE_DOCUMENT with DOCTYPE RxCtree f6bb8871edc9e9e35368e5f4c54723f7ca6c0452 parent 8d3d70d68090052bb0e10efa4eca004de4ee394e parent c338cb7350289795cc657699800aa63bb8726c45 author Mario Heiderich 1644348157 +0100 committer Mario Heiderich 1644348157 +0100 Merge branch 'main' of github.com:cure53/DOMPurify into main ma.xtree 27334abc3a147844ddecf83b42150dc94c67292b parent c36e8a1818d2acedc291a91642b458c81e4361fa author Mario Heiderich 1644348073 +0100 committer Mario Heiderich 1644348073 +0100 See #638 fix: Fixed missing doctype via config flag FORCE_HTML_DOCTYPE nVU˔xTtree 2c669d7f541a63a0b927ef6b9153fe30768c9aff parent 96222d544d465e4ea9d904a9386cd01d94731436 parent d3aef238e6676e63dcfbed9a80d90b66d48c10e3 author Cure53 1643646860 +0100 committer GitHub 1643646860 +0100 Merge pull request #634 from is2ei/doc-ALLOW_ARIA_ATTR docs: describe ALLOW_ARIA_ATTR optionextree 2c669d7f541a63a0b927ef6b9153fe30768c9aff parent 96222d544d465e4ea9d904a9386cd01d94731436 author Issei Horie 1643552062 +0900 committer Issei Horie 1643552148 +0900 docs: describe ALLOW_ARIA_ATTR option QLƓxStree f61212235425a349b93c51731bc54d241bf884f3 parent c36e8a1818d2acedc291a91642b458c81e4361fa parent dc661f26445c19ae0a1e07f0f2d1a8a93fb11608 author Cure53 1643355340 +0100 committer GitHub 1643355340 +0100 Merge pull request #633 from is2ei/update-package-lock.json chore: update package-lock.jsonfxtree f61212235425a349b93c51731bc54d241bf884f3 parent c36e8a1818d2acedc291a91642b458c81e4361fa author Issei Horie 1643298978 +0900 committer Issei Horie 1643298978 +0900 chore: update package-lock.json Kx tree c49a159f2ac1311f5cab8d248c098175a7d5cebd parent d1bdec54f3bad83d2f5d2bb2dcd11c9d959776d8 author Mario Heiderich 1643205617 +0100 committer Mario Heiderich 1643205617 +0100 chore: Preparing 2.3.5. release 5[JxMtree e80ebcb460f7e594b2f2943fcece95bd4e5a30e9 parent 8ac6dc319e6f4d87b3f6d507993f647dbac8a793 parent 8f06e08ba9074690a67ba4c59b2c1d6e9fc2a845 author Cure53 1643123729 +0100 committer GitHub 1643123729 +0100 Merge pull request #632 from is2ei/fix-import-path chore: fix import path for testinggxtree e80ebcb460f7e594b2f2943fcece95bd4e5a30e9 parent 8ac6dc319e6f4d87b3f6d507993f647dbac8a793 author Issei Horie 1643122010 +0900 committer Issei Horie 1643122010 +0900 chore: fix import path for testing "NxYtree b7ca850eed60ae3ebb8d845f01dbc5eaa93784e1 parent 3faeea790dc4b21fd7c9ad7893d767642e49b8a1 parent f6df21695ce6ea54f8c47d7d34cfdbcd989a3daf author Cure53 1643118498 +0100 committer GitHub 1643118498 +0100 Merge pull request #631 from is2ei/bump-karma-firefox-launcher chore: bump karma-firefox-launcherrmPxtree b7ca850eed60ae3ebb8d845f01dbc5eaa93784e1 parent 3faeea790dc4b21fd7c9ad7893d767642e49b8a1 author Issei Horie 1643117915 +0900 committer Issei Horie 1643117915 +0900 chore: bump karma-firefox-launcher O0xWtree 0a81c634e9655d9e235ffda153011490f4e7174d parent 571c265bd611d52a97b47f4d2ddd11f9e2e5f796 parent 673f2b0667feb6b301912f3a158cd7257117fd9a author Cure53 1643100136 +0100 committer GitHub 1643100136 +0100 Merge pull request #630 from is2ei/bump-karma-chrome-launcher chore: bump karma-chrome-launcherQhĜxtree 0a81c634e9655d9e235ffda153011490f4e7174d parent 571c265bd611d52a97b47f4d2ddd11f9e2e5f796 author Issei Horie 1643037914 +0900 committer Issei Horie 1643037914 +0900 chore: bump karma-chrome-launcher ރLڗx7tree da14ad8da21c5a1ae53e328663b6a296bd3ae353 parent ecbf51682350dcb22f31d5730875f57952922009 parent a5ba4f5f944e5705aec4900f89eb6c057317a01a author Cure53 1642954260 +0100 committer GitHub 1642954260 +0100 Merge pull request #629 from is2ei/run-format chore: run format]xtree da14ad8da21c5a1ae53e328663b6a296bd3ae353 parent ecbf51682350dcb22f31d5730875f57952922009 author Issei Horie 1642952706 +0900 committer Issei Horie 1642952706 +0900 chore: run format lFxNtree 3b6b70ecc7cbd4509421343b7aec3141e7e39f8c parent 52adc11fbd3d9b1db67f6f3594fad473b62e8386 parent 61051181acf32290d28185cbbdc6d662f16836fb author Cure53 1642945554 +0100 committer GitHub 1642945554 +0100 Merge pull request #628 from is2ei/remove-babel chore: remove deprecated package babeln9fOxtree 3b6b70ecc7cbd4509421343b7aec3141e7e39f8c parent 52adc11fbd3d9b1db67f6f3594fad473b62e8386 author Issei Horie 1642909731 +0900 committer Issei Horie 1642909731 +0900 chore: remove deprecated package babel cOxAtree 4631e5d9b95295dda019f149b9668d12653a0335 parent a069fff6eab3eb62f97ff5890f25a0377c172ded parent 6fcfb989c6a0133e6aa001d338ccee1a866c90f7 author Cure53 1642866897 +0100 committer GitHub 1642866897 +0100 Merge pull request #627 from is2ei/build-latest-code chore: update bundle 3axtree 4631e5d9b95295dda019f149b9668d12653a0335 parent a069fff6eab3eb62f97ff5890f25a0377c172ded author Issei Horie 1642866501 +0900 committer Issei Horie 1642866501 +0900 chore: update bundle ;H-x\tree 3b170f5276ae2275cd6f966646fc2ff9b76ca9e0 parent f5d596d137fda7a4b313ecafd90f8fed1c712520 parent c1c01835108bfbf0c112f26a11c63fccc4523356 author Cure53 1642860183 +0100 committer GitHub 1642860183 +0100 Merge pull request #626 from is2ei/remove-rollup-watch chore: remove deprecated rollup-watch package`l@xtree 3b170f5276ae2275cd6f966646fc2ff9b76ca9e0 parent f5d596d137fda7a4b313ecafd90f8fed1c712520 author Issei Horie 1642858121 +0900 committer Issei Horie 1642858121 +0900 chore: remove deprecated rollup-watch package RxOtree 88db54e9107f5f45453f0dd430c6e97a730a5f3f parent 174d57d1682f6c64ff6faeb8aa5caba0cf8bf775 parent 6c7e334f3bad42ba9709cc5b205f09886d53f583 author Cure53 1642772873 +0100 committer GitHub 1642772873 +0100 Merge pull request #624 from rzhade3/patch-1 Allow `transform-origin` attribute in SVGs:gxXtree f4415fefddc7faace2bd437b9f5af64107f76e87 parent 8d1135204886dff7f7b689a4d2cc32829bd146e9 parent ad0879a59f9db2cda92c97aac5eb1e1b71f07284 author Cure53 1642772856 +0100 committer GitHub 1642772856 +0100 Merge pull request #623 from is2ei/remove-lodash.isarray chore: remove deprecated lodash.isarrayҭkxtree 8f2b6a377a9de8505fb8d33ede9c7916ae685d69 parent 8d1135204886dff7f7b689a4d2cc32829bd146e9 author Rahul Zhade 1642713649 -0800 committer GitHub 1642713649 -0800 Update attrs.js5Hxtree 0d75d8623d87bd12d5080f0fc4dd193ac001ec6e parent 667f85073313437dd391a70a166f880a4426147c author Issei Horie 1642650661 +0900 committer Issei Horie 1642653551 +0900 chore: remove deprecated lodash.isarray \Nxmtree 5ffb1559281cd7ead04c16c13b804fa4f6b40799 parent 667f85073313437dd391a70a166f880a4426147c parent 3bffb92c6369f5b4b4c66abd8ea4a8c44a4ba9e1 author Cure53 1642618244 +0100 committer GitHub 1642618244 +0100 Merge pull request #622 from tosmolka/tosmolka/fix-emptyHTML fix: node.outerHTML = emptyHTML causes TT Sink violation pxtree 5ffb1559281cd7ead04c16c13b804fa4f6b40799 parent 667f85073313437dd391a70a166f880a4426147c author Tobias Smolka 1642611712 +0100 committer Tobias Smolka 1642611712 +0100 fix: node.outerHTML = emptyHTML causes TT Sink violation ]9Vxtree c3c610956b88004e41faedc6951d8381a128bf04 parent e65b196a0b00524fafb451e4e4928ed85838232f author Mario Heiderich 1642067882 +0100 committer Mario Heiderich 1642067882 +0100 test: Added tests to cover new behavior for insecure IN_PLACE Sxtree 6450a4e54d9af34ca063415ae3a789b7e68a57db parent 632cde5747cedba3407759c388b0e87919e75949 author Mario Heiderich 1642067495 +0100 committer Mario Heiderich 1642067495 +0100 fix: replaced comment node substitution with throw for IN_PLACE &fUx$tree 445838891dab96e36aa3e47170e01d1f00c884e6 parent ec863c61c49be164466d8f4211d368ca6dc5ef3e author Mario Heiderich 1642005476 +0100 committer Mario Heiderich 1642005476 +0100 fix: Fixed a potential problem with risky root nodes in IN_PLACE sanitization ZxGtree 56aeaace30858f4604cbeba09228cb1ddb7c9648 parent c810cb5fd484e278a4c70aaeedc7cef9db9c98fc parent a48e9f8c7810fc0ab81ff4a3f5d9a87a5af0621d author Cure53 1641887579 +0100 committer GitHub 1641887579 +0100 Merge pull request #619 from is2ei/remove-unused-file chore: remove unused filefix tree 56aeaace30858f4604cbeba09228cb1ddb7c9648 parent c810cb5fd484e278a4c70aaeedc7cef9db9c98fc author Issei Horie 1641829009 +0900 committer Issei Horie 1641829009 +0900 chore: remove unused file YcLExCtree 4dd13528b03f666fdd1e550ebe2f2e39594d974f parent c33a4e7eab14716bb51ae1359d936a31cf9b096a parent 05b24e22d9bb41c3774801350e118eccc8e15dd1 author Mario Heiderich 1641470710 +0100 committer Mario Heiderich 1641470710 +0100 Merge branch 'main' of github.com:cure53/DOMPurify into main -a{xtree b6221309a554a8761bdcc20a03052e0f157da4d8 parent 871f721c7c8110b7d114e4e90a8bddc7b473376b author Mario Heiderich 1641470672 +0100 committer Mario Heiderich 1641470672 +0100 docs: added is2ei to credits in README Jx3tree f7947501a8dce502b1f33b412f07dfc81cc200c6 parent 871f721c7c8110b7d114e4e90a8bddc7b473376b parent 9e1c45b42d825caef964cee37b66d774e3b7de31 author Cure53 1641470571 +0100 committer GitHub 1641470571 +0100 Merge pull request #617 from is2ei/616-use-npm Use only npmμ[hxtree f7947501a8dce502b1f33b412f07dfc81cc200c6 parent b8896d0d59404d83334de10f18bda7a0b032f093 author Issei Horie 1641458244 +0900 committer Issei Horie 1641458244 +0900 chore: Use only npm GSxtree 99f61169e2745ff7403d2eb53912b0e21f9dc0d8 parent 871f721c7c8110b7d114e4e90a8bddc7b473376b author Issei Horie 1641456964 +0900 committer Issei Horie 1641456964 +0900 Updated package-lock version hK x7tree ac3ce234102c2950109d3ff5d57d65357a23472f parent 0866794bf43f9a4a47781bafb5ebb0884eb9f13a parent 990a96f8eb2e9e0cbc2876d01e15b4841f770e20 author Cure53 1641221091 +0100 committer GitHub 1641221091 +0100 Merge pull request #615 from is2ei/run-format chore: run formatW]xtree ac3ce234102c2950109d3ff5d57d65357a23472f parent 0866794bf43f9a4a47781bafb5ebb0884eb9f13a author Issei Horie 1641220396 +0900 committer Issei Horie 1641220396 +0900 chore: run format NFxtree 02f880c314494e85d0f4dbc6999b07a3e1ad0acf parent 7fd1d00e7f21f7b22bede3643284b8cb09b413e3 author Christopher Ehlen 1641156848 -0600 committer Christopher Ehlen 1641156848 -0600 Update .gitignore fHRxtree dc0a1951577d720f634fe9372e848fd624bcc590 parent a4ac287053f01ebe3080a522caf02ef06312c7d7 author Cure53 1641124329 +0100 committer GitHub 1641124329 +0100 Update README.md Updated sponsors list%Fx]tree 1550583e0de5715422fcf598a1ac336e5ae73a20 parent ebfee45537fab901616beec5fb91cdd5eb9da008 parent 9f5951810b20b2cfb91d46910a6d3e43a964d3c7 author Cure53 1641121855 +0100 committer GitHub 1641121855 +0100 Merge pull request #614 from is2ei/fix-comments chore: updated comments to use main instead of masterlxDtree 1550583e0de5715422fcf598a1ac336e5ae73a20 parent ebfee45537fab901616beec5fb91cdd5eb9da008 author Issei Horie 1641053782 +0900 committer Issei Horie 1641053782 +0900 chore: updated comments to use main instead of master Signed-off-by: Issei Horie Wzg"xbtree 3e46dc10ce2a28962438f29df780828507bfef52 parent 5afd90cf2a02d2af06e16643abb5f16083af88e6 parent f47c297dc823d212b19055fefb75533e9eb7cd78 author Cure53 1640976826 +0100 committer GitHub 1640976826 +0100 Merge pull request #612 from is2ei/remove-descriptions-about-travis docs: remove descriptions about travisnxtree 72a9ff5e831d70cd114bad039d3d51f779d9fefc parent 5afd90cf2a02d2af06e16643abb5f16083af88e6 author Christopher Ehlen 1640931436 -0600 committer Christopher Ehlen 1640931436 -0600 Stop trimming value attributes [ Xxtree 3e46dc10ce2a28962438f29df780828507bfef52 parent d0748f166f785bc33aa78e388fc75bdbf827d7f9 author Issei Horie 1640888642 +0900 committer Issei Horie 1640888807 +0900 docs: replaced Travis with GitHub Actions on comments mTxtree bc82314bc3beea92345773c14601e8a9b1b73bc4 parent 112921f3985e2cbbef6dc7dc095d54a15a702f0d author Issei Horie 1640888623 +0900 committer Issei Horie 1640888805 +0900 docs: replaced Travis with GitHub Actions on README Rx tree 84c096080a184801abfdce747bf97297e15b1c2c parent 5afd90cf2a02d2af06e16643abb5f16083af88e6 author Issei Horie 1640888577 +0900 committer Issei Horie 1640888803 +0900 chore: formatted README xI&xDtree 703121242836d7deb450659207288f374325005a parent d6ddb19454cf00437c09ab2df90208f7a3f4c7f7 parent 046d945e26e1f332e56a7b1923fbcba59eae68bb author Cure53 1640780071 +0100 committer GitHub 1640780071 +0100 Merge pull request #611 from is2ei/feature/update-nvmrc chore: updated nvmrcaxtree 703121242836d7deb450659207288f374325005a parent d6ddb19454cf00437c09ab2df90208f7a3f4c7f7 author Issei Horie 1640680739 +0900 committer Issei Horie 1640680739 +0900 chore: updated nvmrc 8lGxHtree 54173b1cfb6cd9156d50618cbe521df7d614b8e6 parent a5a32479f87c4d7bad9f66e23334920302ae10dd parent 17c065acbfa695bf095066a09df616e6b5607f1e author Cure53 1640633199 +0100 committer GitHub 1640633199 +0100 Merge pull request #610 from is2ei/fix-typo docs: fixed typo on README for demos~bxtree 54173b1cfb6cd9156d50618cbe521df7d614b8e6 parent a5a32479f87c4d7bad9f66e23334920302ae10dd author Issei Horie 1639755657 +0900 committer Issei Horie 1639755657 +0900 docs: fixed typo on README for demos M<xvtree b8c0714020ba7a9f2b048a6e2e3a4d60306c4b7b parent 7c30f0e193e13e235e6dcefc0196b0582162c1e4 parent a4bf8aafdc9491f31e320d7b9c3ae2f9e9982ff0 author Cure53 1639412777 +0100 committer GitHub 1639412777 +0100 Merge pull request #609 from cure53/revert-608-allow-svg-filtereffects-by-default Revert "Allow SVG filter effects by default"ltcx tree b8c0714020ba7a9f2b048a6e2e3a4d60306c4b7b parent 7c30f0e193e13e235e6dcefc0196b0582162c1e4 author Cure53 1639412410 +0100 committer GitHub 1639412410 +0100 Revert "Allow SVG filter effects by default" Hۖxftree 9dfd956938af705ec02cd4842be3050189353dae parent 4e42e1e98775c11db520d56a2d6eb4f40ee840c2 parent 948b4ee34bc3dde7952c6a50470498716d4d86bb author Cure53 1639412337 +0100 committer GitHub 1639412337 +0100 Merge pull request #608 from mozfreddyb/allow-svg-filtereffects-by-default Allow SVG filter effects by defaultoGxtree 9dfd956938af705ec02cd4842be3050189353dae parent 4e42e1e98775c11db520d56a2d6eb4f40ee840c2 author Frederik Braun 1639410766 +0100 committer Frederik Braun 1639410766 +0100 Allow SVG filter effects by default N:x tree b8c0714020ba7a9f2b048a6e2e3a4d60306c4b7b parent 7982ac88be2d207f9d16c543753183da2b9c8893 author Mario Heiderich 1638887251 +0100 committer Mario Heiderich 1638887251 +0100 chore: prepared 2.3.4. release Hbxtree 008f2f453d8f3654c1b32d217a3f052e7d386f38 parent 769777ae818e36eba3a065856f086502c514dfc2 author Cure53 1637999685 +0100 committer GitHub 1637999685 +0100 Update README.md docs: updated supported platforms'Jxtree ee1170497aecf236a127dd31fad62e5cf6d7ff6a parent 282c2488b60454f2629b34455dc987fa18298679 author Dr.-Ing. Mario Heiderich 1637949922 +0100 committer Dr.-Ing. Mario Heiderich 1637949922 +0100 test: adding Node 17, feeling lucky today QEQxtree b88eba7431f95575001e6feb22a6cacf44ac4920 parent ebadba93e7987890073efa8d681e746a0640ec92 author Mario Heiderich 1637947342 +0100 committer Mario Heiderich 1637947342 +0100 See #604 docs: mentioned Node 16 in README Kx tree 6ec649e73228177099a5942aa38b86252dfd64c7 parent 1876eba8fe9dcbb532f6d50e079e21b6c5027aca author Mario Heiderich 1637946233 +0100 committer Mario Heiderich 1637946233 +0100 See #604 test: trying to add test support for Node 16 JPxtree 0b8a6b4324ac6d07c3397d9d98d565853124d291 parent 8d5e74e027b65631dc3496c107e447d14ba140fd author Mario Heiderich 1637918021 +0100 committer Mario Heiderich 1637918021 +0100 see #603 docs: updated wording on README for CUSTOM_ELEMENT_HANDLING RS/xtree 2fd6f717a3dee5bdc79de41f64027615e780a54a parent ff067763de6225cdd84a36b9d127742bbf3a0dac author Mario Heiderich 1637856354 +0100 committer Mario Heiderich 1637856354 +0100 docs: added info about custom element handling to README +S~xmtree 071cf19c99f81b423b5df7cfd64b7bec4ed9c52f parent e86bcbfce43c97ce92a4a801f67ce2807e1bc4df parent 8bce5510bbca89f1a7145ccb1d64d896c6e65edd author Cure53 1637849789 +0100 committer GitHub 1637849789 +0100 Merge pull request #603 from franktopel/main switched custom element handling to an object defining three differen…mnv x'tree 071cf19c99f81b423b5df7cfd64b7bec4ed9c52f parent e86bcbfce43c97ce92a4a801f67ce2807e1bc4df author Frank Topel 1637844115 +0100 committer Frank Topel 1637846256 +0100 new build P@B xotree 13c58f1923fc4e9dc129e715f496647b8964216e parent 02b84101a02917da4d5b3c76805ccd232068d887 parent 7dea5440db04e3fe845585a789ddc06f7e931ad4 author Cure53 1637827866 +0100 committer GitHub 1637827866 +0100 Merge pull request #602 from franktopel/main allow arbitrary attributes and their values for configured custom elements>r x$tree 13c58f1923fc4e9dc129e715f496647b8964216e parent f317f1609fe89be9f0000dd306ce54ba6efe212d author Cure53 1637827218 +0100 committer GitHub 1637827218 +0100 Update test-suite.jsCAxtree 9515a48c50ff80e459ebaea6474a130b3188bd1d parent 468178d8173b692f29a66ef64cfcc5619fd372ce parent 02b84101a02917da4d5b3c76805ccd232068d887 author Cure53 1637824393 +0100 committer GitHub 1637824393 +0100 Merge branch 'main' into mainPxtree e5fdc4012010e01c627a149ea55456deeabd1e8d parent 0f4842289b36d68644909ed2b5505b93d10bb641 author Frank Topel 1637778019 +0100 committer Frank Topel 1637781901 +0100 * allow arbitrary attributes and their values for configured custom elements * added basic custom element tagname test so we don't open the floodgates with `ALLOWED_CUSTOM_ELEMENTS: /script/` adjusted tests added comments explaining what is going on new build fixed broken test bx tree a50e069dec79860779151e491896094febed3bf9 parent e012a5b4789638d1e2215e3ba02469224859e2b8 author Mario Heiderich 1637775909 +0100 committer Mario Heiderich 1637775909 +0100 test: Expanded array of tested UAs, removed MSIE10 $Oxtree 557f5d498e0eaaa147197f1234ff17705f4a1b3d parent 3be3c8d2db22187f3cb266430639dfc65dcdc25e author Mario Heiderich 1637770101 +0100 committer Mario Heiderich 1637770101 +0100 chore: rebuilt source-maps & min Jxbtree 65aa59f893ef0cd973c3e9475b1d03baac49ae70 parent 49ef8b73cfe54ae8751158cbc290ae2d01f22965 parent 101be35d4f7ffc8cdd90ee5cb20fd27714ca976a author Cure53 1637767868 +0100 committer GitHub 1637767868 +0100 Merge pull request #599 from GrantGryczan/main Significant general performance optimizations in some casespxtree 65aa59f893ef0cd973c3e9475b1d03baac49ae70 parent fbeacb8e0a3eb08e17a91751154979ee055c0e8c parent 49ef8b73cfe54ae8751158cbc290ae2d01f22965 author Cure53 1637767424 +0100 committer GitHub 1637767424 +0100 Merge branch 'main' into main&R`xtree 896c91d74a460e1c59ba8e52ecf3b6042848e648 parent 7ca2a3f93764200b99e6b3e5eca0dc2055f81a83 author Mario Heiderich 1637765439 +0100 committer Mario Heiderich 1637765439 +0100 dcos: updated README with ALLOWED_CUSTOM_ELEMENTS examples -Q؛xtree 138de86f2d425e0f403e37840bb587df4dc2a019 parent bfde263bf2abe7ab6a4ba65706bbd93039cf44bc author Mario Heiderich 1637762441 +0100 committer Mario Heiderich 1637762441 +0100 see #596 test: fixed tests for MSIE 5K1xZtree a0877df069554649359401cab1fec952c8fa90d9 parent 5b7509ba071b5db11446885d0b58e30603e5dfed parent 0f4842289b36d68644909ed2b5505b93d10bb641 author Cure53 1637761524 +0100 committer GitHub 1637761524 +0100 Merge pull request #600 from franktopel/main added tests for ALLOWED_CUSTOM_ELEMENTS config optiono gߔxtree a0877df069554649359401cab1fec952c8fa90d9 parent 5b7509ba071b5db11446885d0b58e30603e5dfed author Frank Topel 1637760989 +0100 committer Frank Topel 1637760989 +0100 added tests for ALLOWED_CUSTOM_ELEMENTS config option Nwxtree 68d7da06bb7731ec849d23e251d9646bd504a4ed parent 3ca4214f46c31eb3535497842f4cb9ade757ce44 author Grant Gryczan 1637759401 -0500 committer Grant Gryczan 1637759401 -0500 Build uhFPxtree 905000a1bef3bae2e2616119986bdde96d0a6f87 parent 1edc3a4f33e316c99b97e2caa7bc65ecc511168e author Grant Gryczan 1637759123 -0500 committer Grant Gryczan 1637759123 -0500 Remove `RETURN_DOM_IMPORT` option 4Prxtree ed5dea969af322fbed34689d8126c7085a57ebab parent 65ff0ea3a82a955b360365a37fc61b1556c9dcbd author Mario Heiderich 1637754814 +0100 committer Mario Heiderich 1637754814 +0100 chore: did some minor formatting changes Nėxgtree f50226068de291cfe639f0600e2494b50031a6fe parent fb8e5bed1db784ff3e55ee100723fefef7dfabdf parent 7ee697226e079bad9871e4225cf63ee79c5c4a4c author Cure53 1637754750 +0100 committer GitHub 1637754750 +0100 Merge pull request #597 from franktopel/main Allow passing of ALLOWED_CUSTOM_ELEMENTS config regex or predicateoSx9tree f50226068de291cfe639f0600e2494b50031a6fe parent fb8e5bed1db784ff3e55ee100723fefef7dfabdf author Frank Topel 1637684789 +0100 committer Frank Topel 1637754061 +0100 make DOMPurify configurable to tolerate custom elements based on a regex or predicate passed to the config uke'xtree 7abf3884ac5b3655cda648371af246cfb33754ff parent 17673402daee41cd74814757ef0e3ed3e183c5b4 author Grant Gryczan 1637753061 -0500 committer Grant Gryczan 1637753061 -0500 Never effectively override `RETURN_DOM_IMPORT` -Tx tree 144c18c245ba23db3e499338713750c823ef7deb parent 12e6cb8d24bab64da4c5f06c501029729cbfff15 author Grant Gryczan 1637751579 -0500 committer Grant Gryczan 1637751579 -0500 Only `importNode` if `shadowroot` is allowed cNUGxtree ddc88cfd2fe1a9cc280323fb2c9a5e11060aa3f2 parent fb8e5bed1db784ff3e55ee100723fefef7dfabdf author Grant Gryczan 1637751550 -0500 committer Grant Gryczan 1637751550 -0500 Optimize `_isClobbered` by only checking `form`s Yxtree d3cc15924212d0c67130d7104f7d0cbbcf9b2252 parent 4fbb0035907362d2dd0d3b2c6cfdb07e5614c319 author Mario Heiderich 1636454768 +0100 committer Mario Heiderich 1636454768 +0100 See #594 Added nonce to allowed attributes XgM%xKtree 6617b0b4c2ab1f8bcbadfc720f90e9235717dc46 parent 879460739d54f426d9a9468fc85dc5de771ebf53 parent 5f925df7e62ff181490a4a33397e8cb14c51b71f author Cure53 1633765765 +0200 committer GitHub 1633765765 +0200 Merge pull request #579 from ydaniv/svg-whitelist-feimage Whitelist SVG tag feImage"@eLx tree 6617b0b4c2ab1f8bcbadfc720f90e9235717dc46 parent 879460739d54f426d9a9468fc85dc5de771ebf53 author Yehonatan Daniv 1633720203 +0300 committer Yehonatan Daniv 1633720203 +0300 Whitelist SVG tag feImage  Kx tree 73f891966fbf404a1170aa9f6021bfe2578b203f parent 3e6471463be72526e19d4fc378e3bd252ed566b3 author Mario Heiderich 1632140846 +0200 committer Mario Heiderich 1632140846 +0200 chore: Preparing 2.3.3 release ]DHMxtree 05b40c0eb855e9532c091e3753df8be868364d55 parent b1d5d8bed8c3a6aad22cc1d9271846e1f67aef1c author Mario Heiderich 1632131344 +0200 committer Mario Heiderich 1632131344 +0200 test: Fixed one remaining MSIE test case Mbxtree f102765bc257dbcb45721eb3d8c02c32e0230be8 parent 9448da5eb1b540515ec3177f25befe8bda74ab69 author Mario Heiderich 1632130636 +0200 committer Mario Heiderich 1632130636 +0200 test: Fixed tests for MSIE H0xCtree 6d0266990797939f61f111a487ceb3b9a0439c8a parent 88264f0e8dfa24472995909a7d8795cbdb9b444a parent bf654604c94a60e2a8d57f8e34e425309512d507 author Mario Heiderich 1632129708 +0200 committer Mario Heiderich 1632129708 +0200 Merge branch 'main' of github.com:cure53/DOMPurify into main _x%tree 169d4583f15efe553cc3964e13576db3146e939f parent 5ca9a6b5e4a32250941263fb74e5cfebc7126d4e author Mario Heiderich 1632129536 +0200 committer Mario Heiderich 1632129536 +0200 fix: Fixed some broken code breaking PARSER_MEDIA_TYPE, spotted by @securityMB Yxtree 58c5bd9314648e009a030c3880a1ddbc2f17a468 parent e336348e544e45d28a026aac18d23472fc4e517c author Mario Heiderich 1631868762 +0200 committer Mario Heiderich 1631868762 +0200 docs: added @GrantGryczan to list of sponsors NѕxUtree 7b3fdc422d4434b22eb3bc291fa1f1410eed36ef parent e336348e544e45d28a026aac18d23472fc4e517c parent 6d88e91fd5833f2143f2ce39e7a504377a1c462e author Cure53 1631865317 +0200 committer GitHub 1631865317 +0200 Merge pull request #572 from zcorpan/patch-1 Fix README.md to reference application/xhtml+xmlgxtree 7b3fdc422d4434b22eb3bc291fa1f1410eed36ef parent e336348e544e45d28a026aac18d23472fc4e517c author Simon Pieters 1631828231 +0200 committer GitHub 1631828231 +0200 Fix README.md to reference application/xhtml+xml/Odxtree 59a6b0658f3fbaf4888084a44e60a022b541bc20 parent 8fd0b599742849f668e09f2e19792560b5f3ae4e author Mario Heiderich 1631719740 +0200 committer Mario Heiderich 1631719740 +0200 docs: mentioned new config option in README 9MRx tree e3687da339d5f234e1e108835a0e2c46071bf32b parent 95c695f5408248c8c37aa64bf55afe2a4b1904cb author Mario Heiderich 1631719201 +0200 committer Mario Heiderich 1631719201 +0200 chore: Preparing 2.3.2 release Hx tree fe5bec1d41461c62087faee2d27cb6db2f72d8be parent cf013c60e05d6322c48d2400a531dab3365de4d1 author Mario Heiderich 1631607747 +0200 committer Mario Heiderich 1631607747 +0200 fix: Fixed a typo in the tests iJ+xtree 8bcc03f6bb3f1bc5510ff05c2616ae0d7208645a parent fdfb61b8842e10df6a80386853bcb674538bd06a author Mario Heiderich 1631606411 +0200 committer Mario Heiderich 1631606411 +0200 test: Fixed tests for MSIE & Edge 18 'Jcx tree f20f6dc4bc30e2b5aa47297186d865b44035bdd0 parent 9327d5748080e4d69e145e486310b270101dcaf5 author Mario Heiderich 1631605004 +0200 committer Mario Heiderich 1631605004 +0200 test: Made further changes to fix tests for MSIE11 GOIxtree 8ad8c9f0bc0fa92998235d36afa11f330b967b5d parent 219e7e5c94f07bc201a86e6ce792df7c0d179dad author Mario Heiderich 1631604066 +0200 committer Mario Heiderich 1631604066 +0200 test: Attempted to fix tests for Edge 18 & MSIE11 4Osxitree 084ac70f459f022578139a9bbc53511dd12f1093 parent f33dca471b5dac62ab965f57ee28b1cfb88f19e3 parent 87e57f57ca40e02921cc9b71503f47ce68b087f9 author Cure53 1631601986 +0200 committer GitHub 1631601986 +0200 Merge pull request #568 from tosmolka/tosmolka/567 Add PARSER_MEDIA_TYPE option to support strict XHTML documents7ngxtree 084ac70f459f022578139a9bbc53511dd12f1093 parent f33dca471b5dac62ab965f57ee28b1cfb88f19e3 author Tobias Smolka 1631545736 +0200 committer Tobias Smolka 1631545736 +0200 Add PARSER_MEDIA_TYPE option to support strict XHTML documents FZ3xtree bb72420a252d243602564d774f75e8ee368ef193 parent 39f874e35bd2a4f7913977c6238011ecf656de99 author Mario Heiderich 1629192276 +0200 committer Mario Heiderich 1629192276 +0200 docs: added lowdefy as sponsor to README Kϓx tree 45fae5924e8a4483d098478c445e1c0704dd3d54 parent a203035424ce6c040117a95da31ce06d40e39a81 author Mario Heiderich 1628867778 +0200 committer Mario Heiderich 1628867778 +0200 test: Fixed tests for MSIE10 GJx tree 4ce1eece157f34adcb8096d43739b4dd89030b02 parent aa2ea91b6463f99b1b9f0b16d486c6c290026261 author Mario Heiderich 1628865800 +0200 committer Mario Heiderich 1628865800 +0200 chore: Preparing 2.3.1 release $Hژxtree 72028d9d6cbf2276c1535703878c944920939b7c parent 84230abc8bf4ec4240d5e908825e9b81063bdd1f author Mario Heiderich 1628593113 +0200 committer Mario Heiderich 1628593113 +0200 Added a mitigation against a problem with templates inside select YVx.tree 7735732a7b3fb984ba617c8e40131735daa14740 parent 2ebc5fc90699830203720c63cfa8421968c7fc17 author Edward <14011954+0xedward@users.noreply.github.com> 1628582483 -0400 committer Edward <14011954+0xedward@users.noreply.github.com> 1628582483 -0400 Move example to "Influence how we sanitize" section \Sx!tree 60625177d5e4bdfa69da1635b02a3addd8474c9a parent 84230abc8bf4ec4240d5e908825e9b81063bdd1f author Edward <14011954+0xedward@users.noreply.github.com> 1628581992 -0400 committer Edward <14011954+0xedward@users.noreply.github.com> 1628581992 -0400 Add example of FORBID_CONTENTS to docs /WxPtree c00576c4ca3ae70b838919fab17c76772b631e0c parent 47e59faf93353197fc6a7d1f1ee1e7e73cbb5817 parent ee45ad21e41881876446b5d4c48fef41a17bd0e0 author Cure53 1628578549 +0200 committer GitHub 1628578549 +0200 Merge pull request #557 from 0xedward/expose-FORBID_CONTENTS Expose `FORBID_CONTENTS` to allow users to specify which elements DOMPurify should remove from the input with its children҈>xtree c00576c4ca3ae70b838919fab17c76772b631e0c parent e080bdbd2e6f788c0d8079755b629dbb2364772c author Edward <14011954+0xedward@users.noreply.github.com> 1628577725 -0400 committer Edward <14011954+0xedward@users.noreply.github.com> 1628577725 -0400 Format with prettier R{x8tree 2211e33be53e1f64b7646f9c9483daa359ce826c parent bc253e7819e05c3f61c037f377d0a45bb20bd419 author Edward <14011954+0xedward@users.noreply.github.com> 1628575408 -0400 committer Edward <14011954+0xedward@users.noreply.github.com> 1628575408 -0400 Add unit test for Config flags: FORBID_CONTENTS + FORBID_TAGS ]xHtree e488d083b60a0ca348ea40a40994b4fd51c071f1 parent 47e59faf93353197fc6a7d1f1ee1e7e73cbb5817 author Edward <14011954+0xedward@users.noreply.github.com> 1628574152 -0400 committer Edward <14011954+0xedward@users.noreply.github.com> 1628574152 -0400 Expose `FORBID_CONTENTS` to allow users to specify which elements DOMPurify should remove from the input, including those elements' children https://github.com/cure53/DOMPurify/issues/556 `xtree 263ef70a0f8a7e55bc52520597eea0d6c005f0c7 parent a8017237ad2974e4e76539d8c225a7a78bb06673 author Mario Heiderich 1628503396 +0200 committer Mario Heiderich 1628503396 +0200 See #554 Added "role" to URI-safe attributes Lnx tree efa4b573c47ceee474880f07b3e5cb74206fd2d2 parent 043b146bb1a913d65accd741f8975e99d54fa4ca author Mario Heiderich 1625567028 +0200 committer Mario Heiderich 1625567028 +0200 chore: Preparing 2.3.0 release lIxtree ab760f1824147fba2dae0b749b3579cbc39c6950 parent 06e3346d5c011a57e1e5d0853cf1b3a9360457d6 author Mario Heiderich 1625559041 +0200 committer Mario Heiderich 1625559041 +0200 fix: fixed return value for jsdom xaJxtree 8acce3f61721d3932466d951ffa79e9747014971 parent 58cc67653bd13fd0ef35cd9369148f7cc83eb142 author Mario Heiderich 1625558607 +0200 committer Mario Heiderich 1625558607 +0200 fix: changed return type for document depending on namespace Tx tree 31d5d31913aff48b87b84bf7105f2d9cbe4b5115 parent be3bb63b7a8959b8b123c76d93ffffee60f7676a author Mario Heiderich 1625517334 +0200 committer Mario Heiderich 1625517334 +0200 fix: changed an element getter causing trouble on FF 8$Rfx tree 440cfd7f5e1aa9d6b681c2efce0fc3a04d3d5c3b parent f66c768d14b6afa7a8a9a2822940cc97330491cc author Mario Heiderich 1625515379 +0200 committer Mario Heiderich 1625515379 +0200 test: fixed FF browser version ?Jx tree aa920ab3d9d825d3c707e784ae1c17d1a49316db parent 3796866d157141797ea07d107d94df0f143d68e0 author Mario Heiderich 1625515168 +0200 committer Mario Heiderich 1625515168 +0200 test: added Chrome 90 and FF 90 to tested browsers _O xtree 2923d23f9d81f478736d85f9131ccce1b31a7588 parent 7f0dd444e1ed37f8807bdc7569e42fb5319c5268 author Mario Heiderich 1625500824 +0200 committer Mario Heiderich 1625500824 +0200 See #548 Added test cases =9F7xtree 2703c27030d21bfb739e9af135e4e2756a4fe69c parent 6b9c4b479ac49f29e68cccbe4db738d924651569 author Mario Heiderich 1625500514 +0200 committer Mario Heiderich 1625500514 +0200 See #548 Fixed an issue with reacting to prohibited data attributes Vxtree f267b053a15a02234ae607145d191a86b4a3e514 parent 8c349f1503d2dba195314364dea6efca1f39f875 author Mario Heiderich 1625500238 +0200 committer Mario Heiderich 1625500238 +0200 See #483 Added version to license header CKx tree df62ab39e4d75be02e45a9fa8c690e572351448b parent c06178c7318e5b787757f3315263a8aabbe15c01 author Mario Heiderich 1622543484 +0200 committer Mario Heiderich 1622543484 +0200 chore: Preparing 2.2.9 release Hxtree 89e16138aed06e7eb3e0d2cd10a6dd184d117582 parent 4955e6462c2147e300e0680b7430078604696384 author Mario Heiderich 1622016755 +0200 committer Mario Heiderich 1622016755 +0200 test: fixed tests for MSIE11 and 11 &Hbx`tree 96ce40ce3d052f4638477cfcea77e4032f664edb parent b8483171de9c9b7cfa4f08e33b4f80f8a1a92c12 parent 81e9d40d4f8bb624d0d47c68e93ef4cce8521bc6 author Cure53 1622013912 +0200 committer GitHub 1622013912 +0200 Merge pull request #541 from NateScarlet/fix-default-namespace Fix issues caused by missing config reset_nxtree 96ce40ce3d052f4638477cfcea77e4032f664edb parent 560a4b9572564b474a378657f5e433f0f4c8a31e author NateScarlet 1622008531 +0800 committer NateScarlet 1622008531 +0800 fix: empty input cause all pending non-html input become empty Xxtree af25cb28dc1f67183f9179ba6d6c9edee2028b55 parent b8483171de9c9b7cfa4f08e33b4f80f8a1a92c12 author NateScarlet 1622002637 +0800 committer NateScarlet 1622002637 +0800 fix: namespace should default to html not previous namespace =Xx tree 3f1b962e57a2169994085b835bfeb88d9fcb5497 parent 81671abba62c640810ffd4e3fed259e0ce19cf4c author Mario Heiderich 1620749322 +0200 committer Mario Heiderich 1620749322 +0200 test: fixed a test for MSIE11 ]Hϕx tree 9eb1b9f5a8267644399bfc208c775205a1548212 parent 3280e03ef1747c62ad0a3949304e571c047fbe37 author Mario Heiderich 1620748606 +0200 committer Mario Heiderich 1620748606 +0200 chore: fixed outdated packages vHxtree 8cd88b9ff71e2c254e6f19d3f7a834094b04f312 parent 1b7d305f9562d8e1751c7a1d4b2d3e40da50e843 author Mario Heiderich 1620747876 +0200 committer Mario Heiderich 1620747876 +0200 chore: rolled back changes in packages.json NoxCtree c16871d5f0b21ea63160ddde5ba66a2d98946d2e parent 8b09ad53da98ec67ed8e6b40a40d52ade3f8f56c parent 973e19e293f064f4e02b458b54233c525f260b44 author Mario Heiderich 1620747832 +0200 committer Mario Heiderich 1620747832 +0200 Merge branch 'main' of github.com:cure53/DOMPurify into main vmaxtree fec908722d4509918b0332bff8998bd8c5a6c491 parent 882d2e5bc4e922ece6c92d5a3bb52a14bd6dcd8f author Mario Heiderich 1620747636 +0200 committer Mario Heiderich 1620747636 +0200 chore: rolled back some package upgrades ]cNjxtree ba20e37f8ace2f0ccbb897392c999a26029ba08f parent 882d2e5bc4e922ece6c92d5a3bb52a14bd6dcd8f author Mario Heiderich 1620744850 +0200 committer Mario Heiderich 1620744850 +0200 chore: updated packages Hxstree 01af11450fe2af16f31439a9023af7c2bf68cd7a parent d50efa9c604128a81e786ce0d02341a1b3e4c5e0 parent 74c38b28a45e204b1653392a261f7d88186b9e5b author Cure53 1620744172 +0200 committer GitHub 1620744172 +0200 Merge pull request #539 from cure53/dependabot/npm_and_yarn/lodash-4.17.21 chore(deps): bump lodash from 4.17.20 to 4.17.21Dnxtree 81b1c73380075ffd72a217583d141c7e06745d80 parent 19aa16275baebdf8470bb2b9404d3c99732dcec0 parent ed4e92649468a380c2452be83ca5b554f84fd741 author Cure53 1620744150 +0200 committer GitHub 1620744150 +0200 Merge pull request #540 from cure53/dependabot/npm_and_yarn/hosted-git-info-2.8.9 chore(deps): bump hosted-git-info from 2.8.8 to 2.8.9s)xotree 81b1c73380075ffd72a217583d141c7e06745d80 parent 19aa16275baebdf8470bb2b9404d3c99732dcec0 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1620743333 +0000 committer GitHub 1620743333 +0000 chore(deps): bump hosted-git-info from 2.8.8 to 2.8.9 Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9. - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9) Signed-off-by: dependabot[bot] x֗"x'tree 58af7ff55ee118774789d2f99465cf7f0d348ddc parent 19aa16275baebdf8470bb2b9404d3c99732dcec0 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1620743328 +0000 committer GitHub 1620743328 +0000 chore(deps): bump lodash from 4.17.20 to 4.17.21 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.20...4.17.21) Signed-off-by: dependabot[bot] e؛xKtree edc39d09e4c6c5a85f2562c38c2ae75bd4d9816f parent 4760ba3d21077d56764b37615c5d108e47270a1a parent 5d60ed90e117ed480c7542a3531a0a2dc3e13f21 author Cure53 1620383583 +0200 committer GitHub 1620383583 +0200 Merge pull request #538 from NateScarlet/handle-empty-input fix: handle empty inputSdx tree edc39d09e4c6c5a85f2562c38c2ae75bd4d9816f parent 4760ba3d21077d56764b37615c5d108e47270a1a author NateScarlet 1620380387 +0800 committer NateScarlet 1620380946 +0800 fix: handle empty input OUIxtree 57063ceb74583af417b718d27b3ce9f9046c111d parent 671d0711c362c1667204a31e4bffd8ed938d0700 author Mario Heiderich 1620370696 +0200 committer Mario Heiderich 1620370696 +0200 test: Fixed the tests for MSIE10 & MSIE11 eJx tree 98083846c57be4c429c82e576166b23511bdc5ec parent da4bea21aba79a1e9699b423623cb36d33e2e0de author Mario Heiderich 1620369623 +0200 committer Mario Heiderich 1620369623 +0200 doc: credited NateScarlet as contributor on README BPěxKtree 37587eb7328fbbb8dd413000d4aca65880e52913 parent cd81f5a2a6ece69c72d450ef5469de68fc30f3c3 parent 2dd8d03eb5f6ed4a86f731fa1088041c20f5ae01 author Cure53 1620369485 +0200 committer GitHub 1620369485 +0200 Merge pull request #537 from NateScarlet/handle-invalid-xml fix: handle invalid xmlY|extree 37587eb7328fbbb8dd413000d4aca65880e52913 parent bb9441419fd413e47237f75e50651c2ddc9358f9 author NateScarlet 1620367981 +0800 committer NateScarlet 1620367981 +0800 test: add html cases to `Test invalid xml' fOxtree 0737fd8a20e1169f466308f92e3f5c7d17710190 parent c2955ee2f8b902e1fdc932f509d89a0e319ba603 author NateScarlet 1620360884 +0800 committer NateScarlet 1620360884 +0800 style: fix lint issues Hx tree 87088fdbb3f28d4a5f1b0357ed6b5b0018b6bc2f parent cd81f5a2a6ece69c72d450ef5469de68fc30f3c3 author NateScarlet 1620359993 +0800 committer NateScarlet 1620360435 +0800 fix: handle invalid xml LJxtree 3a3c79f8b20bdbf1ca808c24dab061ac12bee73f parent cfc679944cf3d2daaa4f73697610ae2767f7662f author Mario Heiderich 1620114957 +0200 committer Mario Heiderich 1620114957 +0200 See #535 fix: possibly fixed an unwanted x-frame behavior in Blink QVx tree c89e3a5799b7072189229f0451a76151ab224ea3 parent 267096e6fa0a3d50c08995ceff63941eb7973770 author Mario Heiderich 1619595729 +0200 committer Mario Heiderich 1619595729 +0200 chore: Preparing 2.2.8 release ~GȞxtree b60c55c72f89aaae40e6606720c5cb2c746c3f03 parent 708baf5464b646de437e8017e41c02aa258c3ce7 author Mario Heiderich 1619524766 +0200 committer Mario Heiderich 1619524766 +0200 test: Fixed a dumb typo qFxtree 553e89dab827a75b2c4feebc4b89e90e03f4a384 parent 940e8984bbc41715135cc444de42b323519d3d36 author Mario Heiderich 1619524030 +0200 committer Mario Heiderich 1619524030 +0200 test: Adjusted tests for MSIE10, sigh 1K,xtree a0a07aae4aaf8b3395dfa53d551f894fb1c660cc parent 395bc1f98686d23cdc46871a6b50012e011bbee1 author Mario Heiderich 1619520672 +0200 committer Mario Heiderich 1619520672 +0200 test: Adjusted tests for old Chrome fix: added missing argument for IE10 Xx tree 02110bd65a61a0efb5a4115bcf755437df6b2140 parent f81f72aeb50e5149bee825458f20521b8a734ba4 author Mario Heiderich 1619517956 +0200 committer Mario Heiderich 1619517956 +0200 test: Fixed tests for Edge 18 TLHVx tree 215b454bad9173b5f12f8a716ff1b3f3e352f239 parent 648c4720465113641a6fa61dd26f3ee0b9a909a1 author Mario Heiderich 1619517402 +0200 committer Mario Heiderich 1619517402 +0200 Adjusted tests for newer FF Gxtree 6220d1f7f4d3caa688f101c4b011952df38649dd parent 7dcf005abd4d5c799d647a0a890207bc4936da7c author Mario Heiderich 1619516717 +0200 committer Mario Heiderich 1619516717 +0200 See #532 Added element getter fallback for older browsers Z]SxLtree 3b35debdf73c1048445c03c0e00c28fd61072d0f parent a188589ec526f7889f25dace7f2723d0a24eee87 parent 131355ca06dd6160aef082ea013fedb9185a792e author Cure53 1619516456 +0200 committer GitHub 1619516456 +0200 Merge pull request #534 from NateScarlet/config-namespace feat: add NAMESPACE configGdix,tree 3b35debdf73c1048445c03c0e00c28fd61072d0f parent a188589ec526f7889f25dace7f2723d0a24eee87 author NateScarlet 1619509866 +0800 committer NateScarlet 1619509866 +0800 feat: add NAMESPACE config for sanitize svg/mathML child innerHTML resolve #533 kH\>xFtree b64d1bb0c0e20e5591aab6f5aef20dc1062e6798 parent 18773a63f2348f9e560384ff55f4f77a8649219d parent 07f3a997466271e7a69bf2f8eb8188b2be7c3f9f author Cure53 1616522470 +0100 committer GitHub 1616522470 +0100 Merge pull request #527 from moefinley/patch-1 Adding missing `slot` attributesc( x tree b64d1bb0c0e20e5591aab6f5aef20dc1062e6798 parent d373c3565e969e9f75512f5966fa43c04abfa951 author Tim Neil 1616519875 +0000 committer GitHub 1616519875 +0000 Added trailing `,`,KC:x6tree 1c3032da820cd12de31841d06f5d8a6540436ec0 parent 18773a63f2348f9e560384ff55f4f77a8649219d author Tim Neil 1616499963 +0000 committer GitHub 1616499963 +0000 Adding missing `slot` attribute https://developer.mozilla.org/en-US/docs/Web/HTML/Global_attributes/slotF~bQxtree a97e9457177d93e5c303431eeb5334e2010e2248 parent 415955b4e60f6efb58d52ab6b34f74a9e797af33 author Mario Heiderich 1615562357 +0100 committer Mario Heiderich 1615562357 +0100 chore: added correct version tags for 2.2.7 eLx tree d571be021606d99ce9d80c6e828d3f367806f41f parent bc7f8a3a788fb9a1a869c275bacec49872fb9495 author Mario Heiderich 1615561918 +0100 committer Mario Heiderich 1615561918 +0100 chore: preparing 2.2.7 release Ihxqtree 6c2fa023d2669f87bb8c22f2fd53fac9d2b4ba0e parent fa31e87aa0e907307d4d8091b7455ebeef741bd2 parent 4b9235bc93eb9f1a788e696b5553f18b816b5b4b author Cure53 1615451882 +0100 committer GitHub 1615451882 +0100 Merge pull request #522 from cure53/dependabot/npm_and_yarn/elliptic-6.5.4 chore(deps): bump elliptic from 6.5.3 to 6.5.4Qpƚ"x*tree 6c2fa023d2669f87bb8c22f2fd53fac9d2b4ba0e parent fa31e87aa0e907307d4d8091b7455ebeef741bd2 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1615451782 +0000 committer GitHub 1615451782 +0000 chore(deps): bump elliptic from 6.5.3 to 6.5.4 Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.3 to 6.5.4. - [Release notes](https://github.com/indutny/elliptic/releases) - [Commits](https://github.com/indutny/elliptic/compare/v6.5.3...v6.5.4) Signed-off-by: dependabot[bot] ϵxtree 53c3de623432da1b841efbb68ad77f53fd789def parent 84f90b0237e82b6890e36e967992cb947b645949 author Mario Heiderich 1613481634 +0100 committer Mario Heiderich 1613481634 +0100 Added better isSupported handling for Safari 9, see #516 iQĖxftree f65cdc4626183c0933107c925edcae57907fab23 parent b2619f660aa9be3a22b15ce66231977e3c033f30 parent e9ee01de8ff606f0c1dda70b6212400484f18947 author Cure53 1613252484 +0100 committer GitHub 1613252484 +0100 Merge pull request #514 from IT-premium-team/bugfix/lookup-getter-fallback add fallback for lookup-getter utilinxtree f65cdc4626183c0933107c925edcae57907fab23 parent 4c8f85271339c9373571ee9b2bc2bca3b095bbd9 author vlad-borodaev <52792277+vlad-borodaev@users.noreply.github.com> 1613231464 +0300 committer vlad-borodaev <52792277+vlad-borodaev@users.noreply.github.com> 1613231464 +0300 clear code X7x<tree 5a596c2975323bcfd2840f10bb68d77f4641b5a3 parent bc7d92ecc013c91c719b85ad6a30087be8840b00 author vlad-borodaev <52792277+vlad-borodaev@users.noreply.github.com> 1613228734 +0300 committer vlad-borodaev <52792277+vlad-borodaev@users.noreply.github.com> 1613229056 +0300 lookupGetter: notify about fallback value cx6tree 51ead50cbf3ee4265f5d061716403564b55492ef parent b2619f660aa9be3a22b15ce66231977e3c033f30 author vlad-borodaev <52792277+vlad-borodaev@users.noreply.github.com> 1613228119 +0300 committer vlad-borodaev <52792277+vlad-borodaev@users.noreply.github.com> 1613228119 +0300 add fallback for lookup-getter util &EaxVtree 94c56b47a87d4551407c93c66d26ceb45705c6a4 parent 10c206f6da4d0c7dd6c4473f12b0dfe610da9d0b parent 6fe5d23bdb6034cca5caceaaca6f5c26a6acae6b author Cure53 1612283295 +0100 committer GitHub 1612283295 +0100 Merge pull request #509 from virajkulkarni14/patch-1 Updated README as discussed in issue #507Bhx/tree 94c56b47a87d4551407c93c66d26ceb45705c6a4 parent 10c206f6da4d0c7dd6c4473f12b0dfe610da9d0b author Viraj G. Kulkarni (विराज गु. कुलकर्णी) 1612282141 -0500 committer GitHub 1612282141 -0500 Updated README as discussed in issue #507 Added a comment at the first occurrence of the `USE_PROFILES` setting to warn that it will override an existing `ALLOWED_TAGS` setting.Hɥxstree 010a515b00ac204d3f0a0f419a2a81bed381cfb4 parent 0fec1e5c68eed3e6dbbb0a443fb94545942552ef parent 4593b4e6064cbbabb7b8da53e90d33ffa86d17b6 author Cure53 1611247276 +0100 committer GitHub 1611247276 +0100 Merge pull request #504 from cure53/dependabot/npm_and_yarn/socket.io-2.4.1 chore(deps): bump socket.io from 2.3.0 to 2.4.1qj'x}tree 010a515b00ac204d3f0a0f419a2a81bed381cfb4 parent 0fec1e5c68eed3e6dbbb0a443fb94545942552ef author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1611247157 +0000 committer GitHub 1611247157 +0000 chore(deps): bump socket.io from 2.3.0 to 2.4.1 Bumps [socket.io](https://github.com/socketio/socket.io) from 2.3.0 to 2.4.1. - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/2.4.1/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/2.3.0...2.4.1) Signed-off-by: dependabot[bot] #xDtree 0404205e764b6c987eadc3d05242f1d908bdf548 parent ebc8c7f8b2d0d0108735c38fc2015591403ff331 parent 9ea0d4881588035e3652eada5ffa7b2eb6361cf4 author Cure53 1611244490 +0100 committer GitHub 1611244490 +0100 Merge pull request #503 from PatrickSachs/main Fixed playground syntax errorb~xtree 0404205e764b6c987eadc3d05242f1d908bdf548 parent ebc8c7f8b2d0d0108735c38fc2015591403ff331 author PatrickSachs 1611243847 +0100 committer PatrickSachs 1611243847 +0100 Fixed playground syntax error Oxtree 66d8284b809b9d8c988cdf2278068e6426047537 parent baaffe3e01551c78851a0635320c75cbe189cf0b author Mario Heiderich 1609690993 +0100 committer Mario Heiderich 1609690993 +0100 docs: Updated README to add credit kjIxtree f1402dc0dcfde159050f783ed32ab35d2feaac74 parent 62a80b8465e506dce09f226ff971c679d0946c8e author Mario Heiderich 1609690909 +0100 committer Mario Heiderich 1609690909 +0100 fix: Added better removal of "is" attributes, thanks @avr4mit U%x tree 1116eb55564321052e89241642bcfcc602a19f5b parent 78e127d7de5eb7b2f1fec8ffcafeb59cd67e2ea8 author Mario Heiderich 1609018286 +0100 committer Mario Heiderich 1609018286 +0100 chore: rebuilt dist version pJxtree c5079c323126ede25981ee42404978ba58512571 parent ddbc251ba6656cebd81683f431f339d72e055170 author Dr.-Ing. Mario Heiderich 1608981695 +0100 committer Dr.-Ing. Mario Heiderich 1608981695 +0100 docs: fixed a typo on README gIKxtree c15f80849b2773292283639015e6e71d5e750945 parent 487707524b325e1fac322a47145416fbe84dfc3d author Mario Heiderich 1608726733 +0100 committer Mario Heiderich 1608726733 +0100 fix: removed unneeded Object.create exposure Mɐx tree 0bf233d6fb9f6534da19360b85035109c65a5df4 parent edd0cb90f855c66109933f3de550a5a155272a3a author Mario Heiderich 1608726603 +0100 committer Mario Heiderich 1608726603 +0100 fix: Added better handling of unwanted is-attributes, thanks @CmdEngineer ?,Y$xtree c4936758bbe8081e368ac3ee55750ef80f806710 parent 0c4e78ed5610b5c8d33510d9589f44d19209c744 author Mario Heiderich 1608645996 +0100 committer Mario Heiderich 1608645996 +0100 test: Fixed a test for MSIE/older Edge qJǐxtree 57d8a136b29076cca5e4e9617632bcc880aeeb93 parent 988b2f86dfbc0b6e80a576c4727af80871f6b336 author Mario Heiderich 1608645505 +0100 committer Mario Heiderich 1608645505 +0100 test: Added recent bypasses to test-suite =N#xtree a2ffa8b1d71b242541fe7fac1b9680c33d43a00f parent d05208dcdb48271b721e0088769ee86980772ebd author Mario Heiderich 1608304326 +0100 committer Mario Heiderich 1608304326 +0100 chore: Preparing 2.2.6 release after failed 2.2.5 attempt /2 R5xtree 2698c197d4b4476d5f32823984d11fe034b5966c parent 0d46d0ceff3272cbc6bd97efad53cf949b5d1e00 author Mario Heiderich 1608303939 +0100 committer Mario Heiderich 1608303939 +0100 chore: Preparing 2.2.6 release after failed 2.2.5 attempt Rx tree da3246c07a6224d391275fe5fe22b8562fba147b parent 86eed679db9fa640f3009e76330326c12ca882d6 author Mario Heiderich 1608303182 +0100 committer Mario Heiderich 1608303182 +0100 chore: Preparing 2.2.5 release "Hox^tree 5868d5135d8ab5f8129548e4e333efd4f165bb4e parent ed44f919331c6f636283bbfe1f999e6c79036d25 parent dfdd7248f9e14a4a20b67131253b8bf7f137cbb9 author Cure53 1608223978 +0100 committer GitHub 1608223978 +0100 Merge pull request #496 from securityMB/main Create a polyfill for __lookupGetter__ to make IE10 happy{kfx2tree 5868d5135d8ab5f8129548e4e333efd4f165bb4e parent ed44f919331c6f636283bbfe1f999e6c79036d25 author Michal Bentkowski 1608223701 +0100 committer Michal Bentkowski 1608223701 +0100 Create a polyfill for __lookupGetter__ to make IE10 happy bx4tree af9aaec8298a2f5023d00468e3dbc0a53c639f6a parent 577db5628d36d28f09bb3360371d655fc132784e author Mario Heiderich 1608221223 +0100 committer Mario Heiderich 1608221223 +0100 fix: Made use of proper helper method to get parentNode test: fixed several more MSIE11 tests j_x tree 45981c8aad7f53dc6369b4258401424787190f5c parent 5df1b8f67100301fa62fcc79c9639b0b694de283 author Mario Heiderich 1608220369 +0100 committer Mario Heiderich 1608220369 +0100 fix: Fixed an issue with parent node mapping in MSIE11 cPxtree 2cbef1e27d5274c5c665d451217a15151367cec5 parent b0f2a85af9e7b435a59050f1e129658bf06910e0 author Mario Heiderich 1608218170 +0100 committer Mario Heiderich 1608218170 +0100 test: Fixed additional Edge 17 and MSIE11 tests mMxtree 554f1c38cc5cb41304ad5eb78cc15c2da8deaaec parent fdd2d71d07dfaab5f5748bc9230dbd633924c0b9 author Mario Heiderich 1608217289 +0100 committer Mario Heiderich 1608217289 +0100 test: Fixed a bunch of Edge 17 and MSIE11 tests [Ox tree e574aed033ed3baad8a39e177ddab95ac5760821 parent 164dacd014f1f50107b989bd2deb21b39cc2d329 author Mario Heiderich 1608215491 +0100 committer Mario Heiderich 1608215491 +0100 fix: Removed usage of has() |HГx tree bf996c0812e6ce3cf0ddf7d804d6a97618f79243 parent 3b98d3cbf89a6d5161247c1a5b9b86d6d5d60cde author Mario Heiderich 1608215206 +0100 committer Mario Heiderich 1608215206 +0100 fix: Remove use of new Set() H͛x;tree 24c2cb81239ef1d5aad52b14248a1bf8118d25f4 parent d410fbc0fb532290908682a93f7dcc56f3ca7f3e author Mario Heiderich 1608212966 +0100 committer Mario Heiderich 1608212966 +0100 Revert "test: Fixed tests for MSIE11" This reverts commit a3b8116a7bbc5431d5fab91a843876648f6fa8fe. (^MxStree 11956b40d765e393d0a9ce8e3448efaeb2351a6c parent ed4376d8223326d2393343eae5b737ae0029321c author Mario Heiderich 1608212964 +0100 committer Mario Heiderich 1608212964 +0100 Revert "test: Fixed additional tests for Edge 17 and MSIE 11" This reverts commit e4b79639d0985ec0f4be26f94423df1852d340b7. vdxKtree e1cc84f83cf85e631a258479df41a86beb34a837 parent 54d05e472a7e79fa96f1ddbf14f171a8a4a47cec author Mario Heiderich 1608212960 +0100 committer Mario Heiderich 1608212960 +0100 Revert "test: Customized additional tests for MSIE11" This reverts commit 54d05e472a7e79fa96f1ddbf14f171a8a4a47cec. X`extree a095477e73e58e13008626b4847b0341f33e364c parent e4b79639d0985ec0f4be26f94423df1852d340b7 author Mario Heiderich 1608212837 +0100 committer Mario Heiderich 1608212837 +0100 test: Customized additional tests for MSIE11 SMWx tree e1cc84f83cf85e631a258479df41a86beb34a837 parent a3b8116a7bbc5431d5fab91a843876648f6fa8fe author Mario Heiderich 1608210994 +0100 committer Mario Heiderich 1608210994 +0100 test: Fixed additional tests for Edge 17 and MSIE 11 BPkx tree 11956b40d765e393d0a9ce8e3448efaeb2351a6c parent eac7b5696efaa56a2cee8de5eb978a9e2c42353c author Mario Heiderich 1608209194 +0100 committer Mario Heiderich 1608209194 +0100 test: Fixed tests for MSIE11 IYxitree 24c2cb81239ef1d5aad52b14248a1bf8118d25f4 parent eb5b3f01957f713d68c85eabbbc50335d9cd0753 parent bcf7c4aef498be03405d11e5a4e53915214408f2 author Cure53 1608207356 +0100 committer GitHub 1608207356 +0100 Merge pull request #495 from securityMB/main Harden protection against mutation XSS caused by namespace switchingpxmtree 24c2cb81239ef1d5aad52b14248a1bf8118d25f4 parent 736486eaafb335ac8f2a6a9061b80d55f8e79995 parent eb5b3f01957f713d68c85eabbbc50335d9cd0753 author Michal Bentkowski 1608199391 +0100 committer Michal Bentkowski 1608199391 +0100 Merge branch 'main' of https://github.com/cure53/DOMPurify into main sxtree 0abca424d5b6e3545275fcd2ed59ef914664bc5e parent 51d8673ebea5163f36d7c8aa0726dffae0eed6db author Michal Bentkowski 1608198361 +0100 committer Michal Bentkowski 1608198361 +0100 Move anti-clobber to purify.js NZx1tree fc600880ecc1cd213c1038d8daf2a5b896fd0227 parent 001eb44ee874f70bc5c27c9dcec74b4fc6ba21f9 author Michal Bentkowski 1608195743 +0100 committer Michal Bentkowski 1608195743 +0100 Another fix in anti-clobber: getChildNodes -> childNodes cxtree 58261356d748e8e8a93f37db14bb4458630ff03e parent 27dcb123cd4107b34ae49eecb48540bd92fa6481 author Michal Bentkowski 1608195623 +0100 committer Michal Bentkowski 1608195623 +0100 Fix a terrible mistake in anti-clobber [xtree 15ee76631e620f57bfdb811af5de5b919d838ab5 parent a0bd51f3d5fda8d2c86273b5fb11e50602608f28 author Michal Bentkowski 1608137209 +0100 committer Michal Bentkowski 1608137209 +0100 Experiment with anticlobber approach \Dx,tree 29d9ae4988b0124e9d9c47bbd37f348cccab0131 parent 6e2bc491cbf57d6418112eed5932409be06192cc author Michal Bentkowski 1608132950 +0100 committer Michal Bentkowski 1608132950 +0100 Add a bunch of tests to check namespace enforcement /s`x#tree f32a01f97cba9f9f255c4c9663ee6b56f1ada467 parent 70be1cd556855d8350ce3ff0714e3ecd217ce9b6 author Michal Bentkowski 1608131453 +0100 committer Michal Bentkowski 1608131453 +0100 Harden node removal against DOM clobbering u^ x<tree c3868d5a236c0fee2d7320ee12eea1774d18a8e2 parent 555c85b71fda35a6ff57fd62157316a562c1ffb4 author Michal Bentkowski 1608124961 +0100 committer Michal Bentkowski 1608124961 +0100 Change svgFilters test so that it also requires svg in allowed tags gxtree 605a2e0f95f3189841a1e2c4f2c544fc6fb08b06 parent 2e8f74010c94a91ab7fc8dcbb6949b3df822eafd author Michal Bentkowski 1608123729 +0100 committer Michal Bentkowski 1608123729 +0100 Fix another two mXSS tests X-xtree 1cc6bd599ffac6d6566b4acee80202d5b68154f9 parent b7b06bbe58a02796b970df7ea148853ef33dd21f author Mario Heiderich 1608113015 +0100 committer Mario Heiderich 1608113015 +0100 fix: Removed unneeded tags from SVG tag map kNx%tree 4945bbc435d15bda8692b413ccc739d5ee8e4d2b parent dffbe4b5002e89f0da60a13f0161d1da45f78529 author Michal Bentkowski 1608107857 +0100 committer Michal Bentkowski 1608107857 +0100 Experiment with the element removal behavior >_xtree 1bb73fc0011fc0484552fc3f854e6a8cbdce2525 parent f25f85f339316881858c0b5f716a5cd35ea09559 author Michal Bentkowski 1608105365 +0100 committer Michal Bentkowski 1608105365 +0100 Fix a bunch of mXSS tests dV(xStree f60685268d7d56fa568fa8e1ebcacea4b2406e75 parent b1420677c3c25037c9da0785e2f15eea80811830 author Michal Bentkowski 1608104517 +0100 committer Michal Bentkowski 1608104517 +0100 Fix mXSS test; because of the new namespace checks, textarea should never occur inside svg ndx#tree e8644a878e9545de280216539ba7eda34dc2f443 parent de77ae68a0b4483f7f1ba56c460162d240d6e38e author Michal Bentkowski 1608104102 +0100 committer Michal Bentkowski 1608104102 +0100 Fix test 35 - is only allowed in SVG ][xhtree 9c7ad9117e100785929f2c3819e69423c5caf310 parent 4fbba79b3fd540b282627bdafeb1ff8325546aed author Michal Bentkowski 1608103876 +0100 committer Michal Bentkowski 1608103876 +0100 Restore the original namespace confusion check as it also killed SAFE_FOR_JQUERY which we don't want to be back wuexLtree 30f196983aa1ec684a4eb3b3c7a65817909f1c14 parent a92f1146783440d5a30d0b5401395773f7c82601 author Michal Bentkowski 1608103002 +0100 committer Michal Bentkowski 1608103002 +0100 Tests assumed that noscript contents should be deleted. Added it to FORBID_CONTENTS Xixtree 505fa26acd06a3cb497ea4ecfabdce5b8a29644b parent 04a74362f22eaee8d6c17622b5d10d7884a66fea author Michal Bentkowski 1608102505 +0100 committer Michal Bentkowski 1608102505 +0100 Delete elements that are not truly SVG xy\x!tree 7f36210ef3f4d4c596005b960606e6246365b205 parent 022f23e4a749a43207c69fd53a68dbab52d67c4d author Michal Bentkowski 1608102215 +0100 committer Michal Bentkowski 1608102215 +0100 Add initial version of namespace checker w[xWtree d17166c11896a03a369ab679f66eeefd879aede9 parent 9c0fc56adae9df84b881967d671ce1513c410d6e author Michal Bentkowski 1608051117 +0100 committer Michal Bentkowski 1608051117 +0100 Delete latest mXSS and namespace confusion fixes since the new approach should fix them anyway w#qRx)tree a60ade99cc08513c7135ab5ab5b7be78feef889f parent 7446340675ea4e74f258977c12f529905ad5ab3d author Michal Bentkowski 1608050854 +0100 committer Michal Bentkowski 1608050854 +0100 Get rid of insertAdjacentHTML to avoid reparsing A_x tree 1ac09e1340ab0483f0b928f7a32632c79e3660e3 parent c0bdec5e57c5d44e4d1a8aa3affae7befaeb1164 author Mario Heiderich 1608049990 +0100 committer Mario Heiderich 1608049990 +0100 chore: Prepare 2.2.4 release /IBxtree 999946033c56b509e8d5a7aa17ee5aa5b47c1c9a parent 3b66c787c4c44bbb5b73dbac1e6017e8f8320507 author Dr.-Ing. Mario Heiderich 1607986695 +0100 committer Dr.-Ing. Mario Heiderich 1607986695 +0100 doc: updated README and credits section *Q—xtree 25f4b84e9865670bbec0b76572b5cd9c5db6ee04 parent c098f318925821d5be3bbe016fe8443b5e1386d3 author Dr.-Ing. Mario Heiderich 1607980309 +0100 committer Dr.-Ing. Mario Heiderich 1607980309 +0100 test: Removed Node 16 again, not supported yet wTxtree b2c8a3529edff94c26efba83ff30b61747fbc6f1 parent 5a21f475faf171b407d58f079d9ab5d1c6a47e25 author Dr.-Ing. Mario Heiderich 1607980208 +0100 committer Dr.-Ing. Mario Heiderich 1607980208 +0100 test: Added node 16 to CI C#Lxtree 1fc0882559fc86430ffeb4227528921c4787dd76 parent 7446340675ea4e74f258977c12f529905ad5ab3d author Mario Heiderich 1607974692 +0100 committer Mario Heiderich 1607974692 +0100 docs: changed some CI details in README wJxtree 003cdac8b9cd90e11fb048068669932329cdef29 parent 5bb205e4d3820945a0cb9c18ec01e9d447635fee author Mario Heiderich 1607945998 +0100 committer Mario Heiderich 1607945998 +0100 fix: changed _forceRemove logic again Lxtree 8f45959d11cf88354884f69b81243385c41204b6 parent a7a78bb47c7226eec33570a7ca63a73c5f5e5ba6 author Mario Heiderich 1607944998 +0100 committer Mario Heiderich 1607944998 +0100 chore: testing new nodejs versions q@K=xtree deb8de94f164314b622f05e66d77475e6f64b821 parent dea1fc0b70171598280804422416906e2923c0b7 author Mario Heiderich 1607944909 +0100 committer Mario Heiderich 1607944909 +0100 hore: removed it again Extree fd87f2499a86498655b05832b463b12e5bdc2f85 parent ba148415116e03c78062c9f41339de8d103b0f99 author Mario Heiderich 1607944793 +0100 committer Mario Heiderich 1607944793 +0100 chore: added lock file to squish errors nLxtree deb8de94f164314b622f05e66d77475e6f64b821 parent e7c489c75ee767282e42f3832f24c45e11dba4c0 author Mario Heiderich 1607943937 +0100 committer Mario Heiderich 1607943937 +0100 fix: deleted yarn.lock kFxtree 17cb628826b1b85539d567811140107c3d7a49ee parent b0bc06fa0ef085ad04660d80e6f999e90ad71483 author Mario Heiderich 1607943589 +0100 committer Mario Heiderich 1607943589 +0100 chore: updated yarn.lock }Gxtree a67a25c192760bb8252884887b44ecb621aa941a parent 1b6bcb2e815ddd5536f57c9faf423bcac20cc481 author Mario Heiderich 1607943160 +0100 committer Mario Heiderich 1607943160 +0100 fix: slightly changed the _forceRemove logic, using node.remove() now s1X?x>tree 3ff5f617df6879bda7262680cd7a5bb3645e55bb parent b6deff49a3c09a5d17afa78198936d8f346f0c21 author Mario Heiderich 1607942773 +0100 committer Mario Heiderich 1607942773 +0100 fix: fixed a problem with _forceRemove for XML nodes fix: made SVG-based attack detection more thorough k"dx tree 6c54354c923ab2b5c5648c9fee4db8a072358538 parent cc506ad5a417003d84ffad35e94650ee2ac47e8e author Mario Heiderich 1607868160 +0100 committer Mario Heiderich 1607868160 +0100 fix: satisfied new linter rules DJxCtree 95fbcd55628ea19ce32f461c4474fe4ce22416a3 parent 290b46765d99d52faf1fed92c0e21b74783315ee parent 0cf1b7a7ee5f16cb2eb881c61a478eab202019bd author Mario Heiderich 1607866066 +0100 committer Mario Heiderich 1607866066 +0100 Merge branch 'main' of github.com:cure53/DOMPurify into main Ebx tree 9ae1f81ddebe77ce802f8974552562284e666f15 parent 8125c8d059c0249d1aa3d3a5f306c65d7d5e2dba author Mario Heiderich 1607864513 +0100 committer Mario Heiderich 1607864513 +0100 fix: reverted last change as it harms older Safari ZPxgtree fdceaba4d8be22ad8f6a551f43eb22666d3d8117 parent 8125c8d059c0249d1aa3d3a5f306c65d7d5e2dba parent 9dff2181767de291192cfc6ded7685b9955fcc3b author Cure53 1607863322 +0100 committer GitHub 1607863322 +0100 Merge pull request #494 from cure53/dependabot/npm_and_yarn/ini-1.3.8 chore(deps): bump ini from 1.3.5 to 1.3.8"lxtree abd78bb105513589c0d3dd5f130bc3f7647b08c8 parent 937a274d481f99c419f9990a30ae5b24a554fc4d author Mario Heiderich 1607862709 +0100 committer Mario Heiderich 1607862709 +0100 fix: removed some superfluous mXSS detection OX xtree 8c71cb64c0199d20ebe85f6ba768e2e5deebef03 parent 937a274d481f99c419f9990a30ae5b24a554fc4d author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1607837082 +0000 committer GitHub 1607837082 +0000 chore(deps): bump ini from 1.3.5 to 1.3.8 Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.8. - [Release notes](https://github.com/isaacs/ini/releases) - [Commits](https://github.com/isaacs/ini/compare/v1.3.5...v1.3.8) Signed-off-by: dependabot[bot] 1xtree 459822dedb52253dfec0f7c596da63efb294b728 parent b44304ff7043475b006d8c0c815d47dfa2673a0f author Mario Heiderich 1607699080 +0100 committer Mario Heiderich 1607699080 +0100 fix: Testing a more advanced mXSS mitigation strategy for MathML V x tree b0641bf6d0f1678549e0c19a0ec7965ffe81c54f parent 071b24e38ed0bc57743877a64cf2718388017775 author Mario Heiderich 1607426841 +0100 committer Mario Heiderich 1607426841 +0100 docs: Added a line about using html profiles to README Px tree f726b2ddf3d9b6be4a53e0b51d6a9e76a35a471c parent f0502b28bba0079f262036294023eb065dc9d2b9 author Mario Heiderich 1607347500 +0100 committer Mario Heiderich 1607347500 +0100 chore: prepared 2.2.3 release vHxtree 64c9161bf14df543c0ef3a9dd499613273e4b4eb parent c1c586dd3161b32744aed145a5bbda8e57fa4ea0 author Mario Heiderich 1607340575 +0100 committer Mario Heiderich 1607340575 +0100 fix: addressed an mXSS problem caused by nested headlines T=xtree a8d4857fe5d2783e3c805c60b474ef820dd9e6ad parent 203c1a372d60faacaf9b006538953adfff4533d9 author Mario Heiderich 1606410887 +0100 committer Mario Heiderich 1606410887 +0100 see #490 fix: Removed some code that nukes legitimate CSS Rx tree 44a4e88c9a6c08edb7cdfda1a3b1d58d17b4668e parent b4e178518a6fc5e1f18b0e6c96fe13112853c7fe author Mario Heiderich 1606410086 +0100 committer Mario Heiderich 1606410086 +0100 docs: Changed granlem's URL ȗIxtree 42b9fddd332335584c2946873a84411b306193c9 parent 84dcd01fc805872a492dd005c82c658e8c0d7c69 author Mario Heiderich 1606409859 +0100 committer Mario Heiderich 1606409859 +0100 docs: added a fellow sponsor to the README ~8L9xtree 678eb2c01fd9f61356f1dd081795d8cd793eabaa parent 02991a878c97465c6e5b15442e831a2f8baa151f author Mario Heiderich 1605769630 +0100 committer Mario Heiderich 1605769630 +0100 Fix #489 docs: Removed a deprecated XSS-risk notekODxJtree 439525f43a318fbe285dc0d8b9e64b9961ee2bfb parent d948bab18486ad95de6e5a7e06d530dfa532c901 parent cae7d58e66faed5cd98e96943805e846c151afea author Mario Heiderich 1605769543 +0100 committer Mario Heiderich 1605769543 +0100 Merge branch 'main' of git@github.com:cure53/DOMPurify.git into mainexGtree 6b3caa731aa53649dee1293698bdf383358e5896 parent 8057df2a57fb3867360104569e5d4d347c9de974 parent 27855f5f4344eb3718a4da5b23496e969bfbc226 author Cure53 1605530556 +0100 committer GitHub 1605530556 +0100 Merge pull request #488 from jochenberger/patch-2 Fix multi-license declaration(bx2tree 6b3caa731aa53649dee1293698bdf383358e5896 parent 8057df2a57fb3867360104569e5d4d347c9de974 author jochenberger 1605524719 +0100 committer GitHub 1605524719 +0100 Fix multi-license declaration https://docs.npmjs.com/cli/v6/configuring-npm/package-json#licenseaxJtree b3c3919008dca3303437985ecf2d098aec2a1d20 parent 9882860f18237832f22aaa87413f904a4b21a812 parent 8057df2a57fb3867360104569e5d4d347c9de974 author Mario Heiderich 1605193555 +0100 committer Mario Heiderich 1605193555 +0100 Merge branch 'main' of git@github.com:cure53/DOMPurify.git into mainbxRtree 5bf69b90a5a61653e800ecfcd706307c1790496f parent d1d22127fc61ce80dff4b19599a35fc2fa83d407 parent 80a076e65a67406357796d32eeb0bb8bfd2c23f7 author Cure53 1604565409 +0100 committer GitHub 1604565409 +0100 Merge pull request #483 from yejiel/patch-1 Update license Header to match current VersionNg'xtree 5bf69b90a5a61653e800ecfcd706307c1790496f parent d1d22127fc61ce80dff4b19599a35fc2fa83d407 author yejiel <53687973+yejiel@users.noreply.github.com> 1604564891 +0200 committer GitHub 1604564891 +0200 Update license Header to match current Version Update The header to match the current version of the npm package Firefox rejected an update to an extension on their store saying the version is not updated and has security issues, but is the updated version, just with bad headerΨǞxtree a4c911563aa509a9192322f45abc549cb8b3fda6 parent 53c43b971c91a435f5eb73704df05d0c5c9b60ae author Mario Heiderich 1604392879 +0100 committer Mario Heiderich 1604392879 +0100 fix: oh dear, reverted the code removal GLxtree fbf3111a984f0f09a5d9bbb3dac9b8bab4472797 parent d1d22127fc61ce80dff4b19599a35fc2fa83d407 author Mario Heiderich 1604392816 +0100 committer Mario Heiderich 1604392816 +0100 chore: experimentally removed some possibly redundant mXSS check X x tree a4c911563aa509a9192322f45abc549cb8b3fda6 parent 4f947082c7a1e1bf898de5bd369375a4043634a3 author Mario Heiderich 1604347315 +0100 committer Mario Heiderich 1604347315 +0100 chore: Preparing 2.2.2 release Hoxtree 73980f88b7a9216aa23a77f929b01b9ad61ba58b parent 9a244216f6567b82a292fc2313b962fa5aadedab author Mario Heiderich 1604347020 +0100 committer Mario Heiderich 1604347020 +0100 test: Added test cases for reported bypasses `O8xtree 84fe3c096613b0b47d43676b134e3f94fc3f8c13 parent 075ba327d17cba3450757aa5161c7247e8ffe7df author Mario Heiderich 1604346931 +0100 committer Mario Heiderich 1604346931 +0100 fix: squished another variation of the mXSS Njx tree 71dc2426eec550812a095e9f2c95e9d384675235 parent d96534a6704e78aaeb2661413eb3309961bd961f author Mario Heiderich 1604346141 +0100 committer Mario Heiderich 1604346141 +0100 chore: Preparing 2.2.1 release Gxtree 1cc302727a3012c34dd3c932b5af462db811bd6d parent 31cdaab7aac3e6eb4dc831409c59f9f5ebe95ca7 author Mario Heiderich 1604345825 +0100 committer Mario Heiderich 1604345825 +0100 fix: Fixed a mXSS bypass reported in #482 Mxtree ce7eb5cb668c184bc52918a4509ef7cfae61b5a3 parent 5908d070294ccb43f0ad5bb43f60971f49c244ee author Mario Heiderich 1604323752 +0100 committer Mario Heiderich 1604323752 +0100 see #480 docs: fixed a minor flaw in README P8Lәx tree 5568e392c2ec5dda6abea5aded0db1ec1b98624c parent 34cd6aad4b94db664691489c24e9f63b3e3a9c2a author Mario Heiderich 1603272456 +0200 committer Mario Heiderich 1603272456 +0200 See #479 feat: added dialog element to allow-list Px tree 0129356f159b4c8a48059ac5003f0a7da1e229dc parent d33a618b06afc851d60b8eca53fb4997ca3d7a7c author Mario Heiderich 1603265040 +0200 committer Mario Heiderich 1603265040 +0200 chore: preparing 2.2.0 release II1x,tree 4e1c8daffc4293f243101b9b2a1691e27f1bae40 parent 29b4e455f1ae8d59365a7a7ec252a03e8d72fd29 author Dr.-Ing. Mario Heiderich 1602943667 +0200 committer Dr.-Ing. Mario Heiderich 1602943667 +0200 test: added tests to cover new RETURN_DOM_IMPORT default being true [x+tree a5696f1e55bcfc025ea0cc1267672916897a08cb parent 333099c60af6ae211b0e1bb645f9635de8ee8a5d author Dr.-Ing. Mario Heiderich 1602943473 +0200 committer Dr.-Ing. Mario Heiderich 1602943473 +0200 fix: fixed a typo in the config option logic for DOM_RETURN_IMPORT Zx$tree a5d853c2bf2662b5a1ce3c875bb86ccf4efb6815 parent dbc5389e57d99fbcf288d9b47b900243a1051a67 author Dr.-Ing. Mario Heiderich 1602942770 +0200 committer Dr.-Ing. Mario Heiderich 1602942770 +0200 fix: changed RETURN_DOM_IMPORT flag to true in config block Xx&tree 286391135902f7742e5995c3f4c657b87dc79834 parent c79b620df24eb6e97798401c08afd340231e6c64 author Dr.-Ing. Mario Heiderich 1602941868 +0200 committer Dr.-Ing. Mario Heiderich 1602941868 +0200 fix: xExperimentally set RETURN_DOM_IMPORT to true by default *Xxbtree 33d95af1c656c5fbc35b19ad6966bb4885afe45b parent 15c661157e4f1deb7dfd631051f1d5ea1facf0bd parent 4d7c77b862ed7e73355dd5a476fca9060c55b1d6 author Cure53 1602079068 +0200 committer GitHub 1602079068 +0200 Merge pull request #474 from MatmaRex/patch-1 Remove mention of the removed SAFE_FOR_JQUERY flag in READMElKxtree 33d95af1c656c5fbc35b19ad6966bb4885afe45b parent 15c661157e4f1deb7dfd631051f1d5ea1facf0bd author Bartosz Dziewoński 1602073932 +0200 committer GitHub 1602073932 +0200 Remove mention of the removed SAFE_FOR_JQUERY flag in READMEVݔx tree 578df179fc22b09319f621e79c95c35198bc7466 parent 298662652023981b9b4ece9675ee071ac1d33f21 author Mario Heiderich 1601034412 +0200 committer Mario Heiderich 1601034412 +0200 chore: prepared 2.1.1 release G7x tree 4f5471ff803ef990e288e70b8f55f8b08baf9daa parent db61c0a156ce7e3a02d75ef8a3ad151374568f1f author Mario Heiderich 1601032352 +0200 committer Mario Heiderich 1601032352 +0200 chore: preparing 2.1.1 release lIxtree 034f85e171c4626a142e0cec2274700fd3ac3d20 parent 3f90c0e558b90bf9aeacb2d053d16d8ed1aad82d author Mario Heiderich 1600965468 +0200 committer Mario Heiderich 1600965468 +0200 docs: updated acknowledgements on README -qMؗxtree 231a70d9242a96b8418037beccb49eacd1b5de3f parent d8f73eedc2a5d25141547f99518db78cfcf55951 author Mario Heiderich 1600964880 +0200 committer Mario Heiderich 1600964880 +0200 fix: re-enabled the mXSS check for old Chrome at the right place UБxtree 01debf6fd6b5e0956985ed04d572586f411c8761 parent 8c8d84c56fedb1fd70e9a3f9488b2a03da43e11d author Mario Heiderich 1600963487 +0200 committer Mario Heiderich 1600963487 +0200 fix: Re-added an mXSS check for old Chrome kMxtree 0525df3a4aaf3037f1af99098bf53e1470e2d783 parent 9890d582cee743ad6b30775438569df1c19da554 author Mario Heiderich 1600934504 +0200 committer Mario Heiderich 1600934504 +0200 test: removed Node 15 again from test matrix Mxtree 423c55b1110b95542a7e0b5199a08cdbf254863c parent 532f0bac3801a2b3ebbb9331899d698699256111 author Mario Heiderich 1600934341 +0200 committer Mario Heiderich 1600934341 +0200 test: Added Node 14.x and 15.x to test jobs !Kcxtree 291b92603646260d3898108fc00cd97cba8c687e parent e0fc8196941d7b6ffa6ecfede796b1ec048c9b6a author Mario Heiderich 1600860774 +0200 committer Mario Heiderich 1600860774 +0200 fix: changed short comment to long to avoid micro-mutations ]UXxtree ce02a3653cf695b6951a2866958c48e15dcbb231 parent 547b17b217dcbf6bd54b3179b3d873a52f7379c3 author Mario Heiderich 1600859487 +0200 committer Mario Heiderich 1600859487 +0200 test: stripped SAFE_FOR_JQUERY from several tests MiOxtree 96d80274047882c3341b48a12e0ffd858df12a8c parent 90a28156a62cbd7427da0f2805010a2cd598e9df author Mario Heiderich 1600857457 +0200 committer Mario Heiderich 1600857457 +0200 test: removed a Safari 8 specific test FKʜx tree 11cd790b8f785f01658f2609f81d114dc3299e0f parent 2d344351190d2c6f7c8691b0af93b094b2a0f414 author Mario Heiderich 1600855790 +0200 committer Mario Heiderich 1600855790 +0200 fix: fremoved a lot of code-voodoo for Safari 8 and 9 Pxtree 927eaf8cab4c19e3ea2d06ae8df38fd6bbc67c7b parent 6764a15f0a82fd8e947278fe4ec6cf922066849a author Mario Heiderich 1600851906 +0200 committer Mario Heiderich 1600851906 +0200 fix: removed some of the removeTitle logic for older MS Edge rUxtree dbf7e42ef28699c8a789e2080af0ffc949cdd586 parent 9b772657a71a97f74a5bebba913e77526a97963e author Mario Heiderich 1600849970 +0200 committer Mario Heiderich 1600849970 +0200 test: updated test website and added a cool name *Px tree 9871382c0754a835ac9cd2ef0eb38a02b9bc8d74 parent 89df55e80122b90e352de9c2983c173490931957 author Mario Heiderich 1600849294 +0200 committer Mario Heiderich 1600849294 +0200 chore: preparing 2.1.0 release JMH+xtree 73a6b38e6ce1cbb6920c2fe71bc9e9777a748d34 parent c7a24d1fd268aa209224ac0f4d9e10a8dff75d8b author Mario Heiderich 1600848876 +0200 committer Mario Heiderich 1600848876 +0200 test: updated jQuery to 3.2.0 on test website Obx tree 57b91a0f1c12dc189ca74aca291ff197bd2dff28 parent 5d22d04d5c3f60477a7197f813e93c9b1dcbfbe3 author Mario Heiderich 1600848529 +0200 committer Mario Heiderich 1600848529 +0200 chore: removed the mention of the SAFE_FOR_JQUERY flag 0RXxJtree c56187026c13d317cb8a7719c092c1b48f98eb28 parent 5357eefe0cd3914f6d51b02af8dab07203169d30 parent 41c0d063b5a5c24a94ddf88af92c5cf2fdf43150 author Mario Heiderich 1600848000 +0200 committer Mario Heiderich 1600848000 +0200 Merge branch 'main' of git@github.com:cure53/DOMPurify.git into mainOd3xtree d074c889793db115f617207091edaa161a8bb434 parent 82ea537fac80701bfe5b11e9e4f27f52cf12d8fc author Mario Heiderich 1600847871 +0200 committer Mario Heiderich 1600847871 +0200 fix: added code to fix attribtes for old jQuery OxCtree 2e788a3d2ee9681e49f11fdf9faf616b299d94dc parent 15eaf3f2b5de421837c034849e54bf1743894868 parent d7fbe719a7e57216df0b4e8d286a468bcc4555ec author Cure53 1600847724 +0200 committer GitHub 1600847724 +0200 Merge pull request #471 from hackvertor/patch-1 Added auto convert checkbox)bxmtree 2e788a3d2ee9681e49f11fdf9faf616b299d94dc parent 15eaf3f2b5de421837c034849e54bf1743894868 author Gareth Heyes 1600847521 +0100 committer GitHub 1600847521 +0100 Added auto convert checkbox Added the checkbox because it's a pain in the ass to test the demo clicking that button all the time or having to modify the DOM to add the onkeyup event every time.X\xtree 81f67d47b4ebf54061f841faa51747dbdb6b2df2 parent 15eaf3f2b5de421837c034849e54bf1743894868 author Mario Heiderich 1600847089 +0200 committer Mario Heiderich 1600847089 +0200 chofre: expreimentally removed SAFE_FOR_JQUERY O:xtree a1dcecfadeeae4d413a41aeda3bd3ab442ae09bb parent f8921777887ea48f8c7c2cdbbfe83dfb3aa0a741 author Mario Heiderich 1600846187 +0200 committer Mario Heiderich 1600846187 +0200 fix: re-added a noembed mXSS check ; 1600844849 +0200 committer Mario Heiderich 1600844849 +0200 test: changed browser version flags slightly for MaxOS Syxtree 6dd36416d8412a1dada7c2584b344be7d735560e parent 42c419e6b82e0a433ba3dbb03ede5c66725fc1be author Mario Heiderich 1600844008 +0200 committer Mario Heiderich 1600844008 +0200 test: updated array of tested browsers Mxtree 04161238acc47171a7dba9ca3f8a2c067a343a2b parent cad33c22715e11796c5853f9f98002bac415c34d author Mario Heiderich 1600701533 +0200 committer Mario Heiderich 1600701533 +0200 test: added a test for a bypass spotted by Gareth A2Oxtree cc6d6ba1aca1893412476bb4d60e8c82df9d4505 parent 426338ff0e927b78a37e6de81ee138d9bdef07a3 author Mario Heiderich 1600698400 +0200 committer Mario Heiderich 1600698400 +0200 fix: rolled back the simplified check `BLxtree 1251160c4322c2fb955f2efe9c208aa3da45b8b7 parent a11a87659c7ad179bbeb38543134aff84b3338c1 author Mario Heiderich 1600698359 +0200 committer Mario Heiderich 1600698359 +0200 fix: simplified the mXSS check a bit )Kdxtree cc6d6ba1aca1893412476bb4d60e8c82df9d4505 parent b2265cc1fc5c7f570b937115cf820c3f33542a7a author Mario Heiderich 1600698123 +0200 committer Mario Heiderich 1600698123 +0200 fix: fixed a missing call G֚x tree 1222759fd75c547b927dbfd7e55399d5a2a4f690 parent ee71c1d1d662310c39f55891332ae4af795251d1 author Mario Heiderich 1600697957 +0200 committer Mario Heiderich 1600697957 +0200 fix: rolled back some of the changes for mXSS check P$xtree 8a338e4b04762e98fccf5634bd6523d895829588 parent a77a7b074c740ff085f0778a3641471f3c0b2c3a author Mario Heiderich 1600697841 +0200 committer Mario Heiderich 1600697841 +0200 fix: changed the mXSS check to be more accurate :Nxtree 6d486ca0d9b030dfca7b89dbb1c38bdf89fbb291 parent f2f851c7112a25318d54a7ffccef60aa2f87d65b author Mario Heiderich 1600697736 +0200 committer Mario Heiderich 1600697736 +0200 fix: added a new experimental mXSS check Nxtree 15e527ff4715c14176a1478eef4406c13f906960 parent 073fa077813d000c99519c8ecc5f41601b21e2a2 author Mario Heiderich 1600696068 +0200 committer Mario Heiderich 1600696068 +0200 fix: Reverting back to textContent checks jLx tree 9273084dd5a6f3fe077cabbf828513fae1ac37ba parent 1f66034ccf72ef1db65fc7b3384bad8fd5fea336 author Mario Heiderich 1600691819 +0200 committer Mario Heiderich 1600691819 +0200 test: Fixed some tests to match new scrubbing strategy rTux tree cba2cb226eca4c7c1a098bb5171e3b8194e816f3 parent 7bb934cb723d61adc03cc4d6a6a72054ec55fffc author Mario Heiderich 1600689457 +0200 committer Mario Heiderich 1600689457 +0200 chore: cleaned some unused code Krxtree 5fdab13c944e2e8cd513c076a968eaf5dec3963a parent 6b303d7dafa47f775bc4f7da8f292c4050741fa3 author Mario Heiderich 1600688102 +0200 committer Mario Heiderich 1600688102 +0200 fix: changed mXSS regex ever so slightly N1xtree 68b48d3d7e90996916d7edc220127b74ce40a6a1 parent ff50b050134a91d4526be0008bdbb6f719cdb921 author Mario Heiderich 1600687699 +0200 committer Mario Heiderich 1600687699 +0200 fix: Made the regex check for mXSS less accurate (a.k.a. match more) xUxtree 582175c7bd80ac0609348e5f692db731eca99814 parent de5c2b4b0ff75edb5e5c16780636b342c4655522 author Mario Heiderich 1600622210 +0200 committer Mario Heiderich 1600622210 +0200 test: fixed another bunch of MSIE/Safari tests 5Nxtree 3d0eef6aa8e65bc761eb6f0e53d310d8eb36021d parent b35456e2009549020c10fa9fcc7617385053f711 author Mario Heiderich 1600621922 +0200 committer Mario Heiderich 1600621922 +0200 test: Fixed some more tests for IE10/IE11 KÜxtree 0797cb85905502004b8bb31016e63fcc747c48a2 parent 3950e719fdec7c33e2068c302785c360aed4ad1b author Mario Heiderich 1600621258 +0200 committer Mario Heiderich 1600621258 +0200 test: fixed some more IE10/IE11 tests 9'JWxtree 2bc867f4e0ab8dbd2693dd2edb8dfdccb6eb55c3 parent fa7eaa2c37602ccc86b70d3f5243284326b6fd1b author Mario Heiderich 1600620123 +0200 committer Mario Heiderich 1600620123 +0200 test: fixed some tests for IE10/IE11 $LKx tree c1c7d73b0fbb5b527ce1fd597cab500f30b6c845 parent 1bfb7fd94447e8ec6a52bf7acb85590f9023fcb9 author Mario Heiderich 1600618295 +0200 committer Mario Heiderich 1600618295 +0200 fix: changed mXSS check from textContent to innerHTML S"xtree ffca39102b9394f6e71fda6c61b7f0d8febbbbe3 parent 0061749f64cd206bc309029556a3fa111747d9b0 author Mario Heiderich 1600617895 +0200 committer Mario Heiderich 1600617895 +0200 fix: re-added better noembed/noscript mXSS checks ,Qxtree 782bfa7e8599a347cdc3d3fea3aa4a7ad1e1ea7f parent a8ecb7510805be67d1290ae7221152f38f6d13c2 author Mario Heiderich 1600617331 +0200 committer Mario Heiderich 1600617331 +0200 test: Fixed a test result for DOMPurify.removed SPxtree 376faf2f86dad7785072d91161eba9494cc3b736 parent f1890071ad114fe4c319febf14707956e7c9535f author Mario Heiderich 1600616988 +0200 committer Mario Heiderich 1600616988 +0200 fix: Adjusted tests and removed superfluous DOMPurify.removed push :Wwxtree e894bf2091e78316063c2945b8d38ae1a3922224 parent 34b9017f71c61fbc30b5f0a3cd722d46f2254502 author Mario Heiderich 1600615849 +0200 committer Mario Heiderich 1600615849 +0200 fix: Removed noscript/noembed mXSS checks )Lxtree ae50c8f6250e9eac2a58b69f91dcc58b87dba61f parent 361308683ba305b316cc9525afefa75bd39fe0ef author Mario Heiderich 1600615720 +0200 committer Mario Heiderich 1600615720 +0200 fix: Attempting another more generic fix for mXSS attacks /Tɛx tree 9d632f5fe3078c5431943258c63c1a71efc8da84 parent d1a823ba1dc14529ef56a6aa5df696ec8bd4ecb7 author Dr.-Ing. Mario Heiderich 1600600544 +0200 committer Dr.-Ing. Mario Heiderich 1600600544 +0200 chore: rolled back several changes 8Q x tree bff4bf21a6e8714b2afd46945f6c8106661024b8 parent e95e4e76da069d7243c5e9bc0441e84ecda97f72 author Dr.-Ing. Mario Heiderich 1600600162 +0200 committer Dr.-Ing. Mario Heiderich 1600600162 +0200 fix: changed element removal again iGP}xtree ed038b04c73c9d02e0d7553b363961509c012c2b parent 2c5a446824cb1ad52619c0a563dbd4aa60874d71 author Dr.-Ing. Mario Heiderich 1600599934 +0200 committer Dr.-Ing. Mario Heiderich 1600599934 +0200 fix: changed element removal fallback :Px$tree b043a41e99dea7e9b12a734c1b33e63068396f8f parent 86daaac758cc1a7c402443024b5040b8ceb87087 author Dr.-Ing. Mario Heiderich 1600599675 +0200 committer Dr.-Ing. Mario Heiderich 1600599675 +0200 fix: squished an exception caused by new scrubbing strategy pY֚xtree 7c06d4d7fcd6e155ba4a5f0ad55c6283d9f92c2d parent 9fa3b9390e3fc8e2eee3ad1a72c7cbd7eee0165a author Dr.-Ing. Mario Heiderich 1600598001 +0200 committer Dr.-Ing. Mario Heiderich 1600598001 +0200 fix: fixed a typo vKx[tree 56ea492469bd897bc44170efcc68769b4724afd4 parent ad994964e429b366da534de12d28c66af1f74829 author Dr.-Ing. Mario Heiderich 1600597930 +0200 committer Dr.-Ing. Mario Heiderich 1600597930 +0200 fix: Made the check for mXSS-y elements a bit stronger test: changed more tests to match the new expected behavior olxtree e6364ff39ee69cb28491e14a97e36e5ac6e58e42 parent 96cad036f0eadb89d81f4d159117ed9d480d8afa author Dr.-Ing. Mario Heiderich 1600596942 +0200 committer Dr.-Ing. Mario Heiderich 1600596942 +0200 chore: removed some more SAFE_FOR_JQUERY-related code .DW-x%tree d0c825d4cf13a4fad9ab729eb0b7daec69475ec9 parent dafbe1ac070a7f1de5bbd7ee140d81c700f4ac12 author Dr.-Ing. Mario Heiderich 1600596444 +0200 committer Dr.-Ing. Mario Heiderich 1600596444 +0200 test: Adjusted another test case for missing SAFE_FOR_JQUERY [x+tree b42ed3da1cb3a7a15d25c3168f6107bc56f68e32 parent 61301183a4f17623201ab7a8255177cdce5a708a author Dr.-Ing. Mario Heiderich 1600595740 +0200 committer Dr.-Ing. Mario Heiderich 1600595740 +0200 test: Modified tests to be in line with current scrubbing strategy [̕x%tree 564e260928c75f16d58801f99ea1d99c8ab4a04a parent e685c41967936a005e2f06a1d680793e682ea708 author Dr.-Ing. Mario Heiderich 1600593877 +0200 committer Dr.-Ing. Mario Heiderich 1600593877 +0200 fix: attempting a more holistic fix for recent mXSS patterns iXxtree 9d632f5fe3078c5431943258c63c1a71efc8da84 parent 40727f50d6ec7751d16a983481f468f890b08072 author Dr.-Ing. Mario Heiderich 1600591406 +0200 committer Dr.-Ing. Mario Heiderich 1600591406 +0200 chore: preparing 2.0.17 release BbLxtree 0e242c2b08ea4464b768b6ce34b9ffe4bcbefc0d parent 8719baef113f35f17f8d99afebb851c05a390212 author Dr.-Ing. Mario Heiderich 1600588541 +0200 committer Dr.-Ing. Mario Heiderich 1600588541 +0200 fix: attemtping to fix another mutation behavior W!x tree 93de73bd293ac02a43641683704758b21664b1e4 parent be880477890a18d74fb6555e806081920a9fc529 author Mario Heiderich 1600431812 +0200 committer Mario Heiderich 1600431812 +0200 chore: Preparing 2.0.16 release ׮GVxtree caddf4eba6a5efbc4635060de98ba8810fe00b6a parent fa2338d322561d75e9c0fa4634a96dba5b239e09 author Mario Heiderich 1600431525 +0200 committer Mario Heiderich 1600431525 +0200 See #470 fix: added try-catch to avoid error on old Chrome 9SXx tree 5321ffe4bb1a4aa6dd2c68935fb570612a1dbc1e parent 13c65d6955f90295e6fcb9862a19b92b5eedcf71 author Mario Heiderich 1600325479 +0200 committer Mario Heiderich 1600325479 +0200 fix: Attempting to fix a MathML-based mXSS pattern Q4x tree 105dbd229291b159ffc75ea77ba69bde7e0b5e41 parent 74538459859cd91958fde94ae9ab54a3cb6d0360 author Mario Heiderich 1599127572 +0200 committer Mario Heiderich 1599127572 +0200 chore: preparing 2.0.15 release \Ix tree bcf06162b6a06421aecd68451de419d929958cde parent 3437655736e9c6b591213ecb4fc3129c646d78f5 author Mario Heiderich 1599127401 +0200 committer Mario Heiderich 1599127401 +0200 fix: changed the linter settings to be more tolerant 6QxJtree a17d55e1c575701e9df3309c4b1dce0594d29c70 parent 4aee50256283edbd4e92b63b8c28c71dc09f0b8e parent 04b3ed10f53eb071f3fdbd41ef272fe09039b2d4 author Mario Heiderich 1599122124 +0200 committer Mario Heiderich 1599122124 +0200 Merge branch 'main' of git@github.com:cure53/DOMPurify.git into mainY'extree 61377ff2b06eb51410a4f5b4977c093c6909a627 parent b422fdf751632dc7cc35a794d71435ac6686ac51 author Mario Heiderich 1599114121 +0200 committer Mario Heiderich 1599114121 +0200 docs: added peernohell to list of contributors OUxitree aac6780da802280bc1106048e2539c28a1493dca parent b422fdf751632dc7cc35a794d71435ac6686ac51 parent a3097278b6d38107bda0cfd88eacb95aad85961a author Cure53 1599112883 +0200 committer GitHub 1599112883 +0200 Merge pull request #464 from peernohell/main Merge branch 'main' of https://github.com/cure53/DOMPurify into mainn՝x tree aac6780da802280bc1106048e2539c28a1493dca parent e5502b6e8003f950315361c1f15e3a72c10f1e39 author Francois Lecroart 1599073547 +0200 committer Francois Lecroart 1599073547 +0200 add VirtualConsole to hide jsdom warning mSxtree 091942932ca6209d838454ff5d48466148152677 parent 31c8e5393cdcc9939c8f589f0f6b7724108aa19c author Francois Lecroart 1599072981 +0200 committer Francois Lecroart 1599072981 +0200 update yarn.lock file L&xYtree cd3fc744ce9bb6effb40e58794a9b29aee85dbca parent 5a627e1a8bd7689eb5cd02be5f8bc48ce9ded6cd parent b422fdf751632dc7cc35a794d71435ac6686ac51 author Francois Lecroart 1599069527 +0200 committer Francois Lecroart 1599069527 +0200 Merge branch 'main' of https://github.com/cure53/DOMPurify into main )mÐxOtree 7d49a21a08be7dc1a7a4432ddabc419eefc7684f parent 0746aa9753908d725de0dd4eb0d4ed3649507110 author Francois Lecroart 1599069519 +0200 committer Francois Lecroart 1599069519 +0200 Update jsdom to version 16.x.x replace call of jsdom.env by instance of new jsdom.JSDOM create dom element to inject jquery script [took from this so answer](https://stackoverflow.com/a/56760403/958898) x tree c38cc7ab67ebe086f70f7506c126801a71bd81d8 parent bfd4f8ec201e8e0aeb68377ff706106c8e10a35f author Mario Heiderich 1598965449 +0200 committer Mario Heiderich 1598965449 +0200 test: fixed a test for Edge 17 ZiI~x&tree 98a91bded69bcdfa752745a228e6c3ddde5e6e5b parent 22c6ce27f07615c7eb13d67fbfca188926392a36 author Cure53 1598955554 +0200 committer GitHub 1598955554 +0200 chore: testing CodeQL workflow Adding an experimental workflow file, just to see what happens.O]9xZtree 643423292f308b1a594d451d422b385ec8a3aa30 parent 0746aa9753908d725de0dd4eb0d4ed3649507110 parent 33ef6c9506ae99bf1d932daa747d4179f4debaad author Cure53 1598955458 +0200 committer GitHub 1598955458 +0200 Merge pull request #463 from timgates42/bugfix_typo_return docs: Fix simple typo, retrun -> return;7jWxstree 643423292f308b1a594d451d422b385ec8a3aa30 parent 0746aa9753908d725de0dd4eb0d4ed3649507110 author Tim Gates 1598910458 +1000 committer Tim Gates 1598910458 +1000 docs: Fix simple typo, retrun -> return There is a small typo in dist/purify.cjs.js, dist/purify.js, src/purify.js. Should read `return` rather than `retrun`. uϟxtree b6a20e8f6c159c2a9d72c6262c207d40cd844733 parent ada325a3165b469161f6d6946cc40b67540bb191 author Mario Heiderich 1598597429 +0200 committer Mario Heiderich 1598597429 +0200 docs: extended README with better documentation examples @[Rəx tree 74f50ef6b622ab826009db22a3a11aa17bb569dc parent 263c949c7db8d4606154dbd4902f0fce577050ca author Mario Heiderich 1598595418 +0200 committer Mario Heiderich 1598595418 +0200 chore: added more badges to website because badges Q6x/tree 5935412974988e287a4ed5a59e834da3209862c6 parent 2f81b9389ab555a95919585841fb93444a0f546d author Dr.-Ing. Mario Heiderich 1598562849 +0200 committer Dr.-Ing. Mario Heiderich 1598562849 +0200 fix: attempting to fix a prototype pollution targeting SAFE_FOR_JQUERY [x5tree babbb854786e6135117251167ab2a494e10891f5 parent 19630b55beca501dddf33271c51402f591f9a5f5 author Dr.-Ing. Mario Heiderich 1598561961 +0200 committer Dr.-Ing. Mario Heiderich 1598561961 +0200 fix: fixed a problem with documentMode default chore: prepare 2.0.14 release .]Ėx tree 8ac47f880f81de68512ddffc25a0e982b9437f29 parent 0ada92e028b11b1aee6c6f1d427f7c3dd1f390a5 author Mario Heiderich 1598539086 +0200 committer Mario Heiderich 1598539086 +0200 chore: preparing 2.0.13 release !J xtree cd0679d19b00e2f223687be3ff8a78376eccb0f4 parent c28d940ef49e326a2d8eff0baac4559622b42ef9 author Mario Heiderich 1598537046 +0200 committer Mario Heiderich 1598537046 +0200 fix: fixed a broken test affecting older browsers HQQޒxtree 5c3771a313a5af6d5a1d02b257d1e8fcc7eca584 parent 4c142ec2c2b9a85df294b04c8f184e659b54c527 author Mario Heiderich 1598534491 +0200 committer Mario Heiderich 1598534491 +0200 fix: added another fix against a prototype pollution attack AUhx tree fb79dbe8adabfc8dab35ae0e2738a74621e742a8 parent d9f788a198f03b0094ee6022e2cfff715499ff2a author Mario Heiderich 1598529468 +0200 committer Mario Heiderich 1598531846 +0200 chore: added test for prototype pollution protection T-xtree e9ea4f1604c093e22c539836127a7227268a854a parent dcba44e59da57a106a806a171b1720007e3eea1f author Mario Heiderich 1598528585 +0200 committer Mario Heiderich 1598531852 +0200 fix: Attempting to fix prototype pollution attacks against config object ӥY x(tree 0665a03fde924032d0eaa38219fcd67ce39ea1f0 parent c68a876e9050af29663c32e9ded01aa00be00cca author Cure53 1597664053 +0200 committer GitHub 1597664053 +0200 Update README.md?[xtree 54c982028452573361faae8c47e1865b7a21a1bf parent a0ec2857c88cfbe5a6dff9623b66a2094db9405d author Cure53 1597654484 +0200 committer GitHub 1597654484 +0200 Update README.md Removed Bower badgeCExtree 39ae169a34433cf07e549ba55be9793b02353029 parent 6a0b3d446685dacc4cddd9a1443fefa31aa173e5 author Cure53 1597654157 +0200 committer GitHub 1597654157 +0200 Update README.md Removed and replaced broken badgesKxNtree 3a271e9ebdb0182968dc77f3cc6d050f0422c99f parent ff48f2b47a45d70980e212cc7bf8be02b087a22d parent 0e03e96b63d339f2f401c3010ce2a1a6fd392c58 author Cure53 1597416140 +0200 committer GitHub 1597416140 +0200 Merge pull request #460 from tjwds/fastmail-lowercase-m Update Fastmail capitalization 1597411548 -0400 committer Joe Woods 1597411548 -0400 Update Fastmail capitalization OMxCtree 68b816efe88351a18d2ad3ff04e6220d87ad916b parent e8a345975069135b7cccea11a17c1ff3a846bd09 parent cd32920d4a8bfe81c6801ad3d9d9414c84f95495 author Cure53 1597005219 +0200 committer GitHub 1597005219 +0200 Merge pull request #459 from naineet/main Added BrowserStack Logo to Readmeax;tree 68b816efe88351a18d2ad3ff04e6220d87ad916b parent e8a345975069135b7cccea11a17c1ff3a846bd09 author naineet <36953606+naineet@users.noreply.github.com> 1597003526 +0530 committer GitHub 1597003526 +0530 Added BrowserStack Logo to Readme Hi, Thanks for finding BrowserStack Service Valuable. I have added BrowserStack Logo as this helps us reach more open source developers like you more effectively. Naineet BrowserStackǐx`tree 3d985a52317c606ac2b8671cd36a04d013f3ae3c parent 3288ad7c7ed0417cf7d62e57b00012e733284f08 parent 69e936afa5f0ad729d7b44b710f9792516c78268 author Cure53 1596626570 +0200 committer GitHub 1596626570 +0200 Merge pull request #457 from ydaniv/master Added missing clipPathUnits and systemLanguage SVG attributesblHxtree 3d985a52317c606ac2b8671cd36a04d013f3ae3c parent 3288ad7c7ed0417cf7d62e57b00012e733284f08 author Yehonatan Daniv 1596623474 +0300 committer Yehonatan Daniv 1596623474 +0300 Added missing clipPathUnits and systemLanguage SVG attributes Xxqtree b27d5f65ad3f044cd0460b5de7ae91012c2687a2 parent eab78b68ac987d4d8a4d5e8b3753092da8870602 parent 0e52c3f49672b81a5090e41cdee6a8338f5467d4 author Cure53 1596142115 +0200 committer GitHub 1596142115 +0200 Merge pull request #455 from cure53/dependabot/npm_and_yarn/elliptic-6.5.3 chore(deps): bump elliptic from 6.5.2 to 6.5.3aoo"x*tree b27d5f65ad3f044cd0460b5de7ae91012c2687a2 parent eab78b68ac987d4d8a4d5e8b3753092da8870602 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1596141920 +0000 committer GitHub 1596141920 +0000 chore(deps): bump elliptic from 6.5.2 to 6.5.3 Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.2 to 6.5.3. - [Release notes](https://github.com/indutny/elliptic/releases) - [Commits](https://github.com/indutny/elliptic/compare/v6.5.2...v6.5.3) Signed-off-by: dependabot[bot] ɓxstree 2437e3ad974872f2117f3b38a2f732eb4540958c parent 76a009e109eeab5c11a93c940a1e32f810c37a80 parent 72273ebcdd5f08356d950865ce027bb6d3887990 author Cure53 1595520780 +0200 committer GitHub 1595520780 +0200 Merge pull request #454 from cure53/dependabot/npm_and_yarn/lodash-4.17.19 chore(deps): bump lodash from 4.17.15 to 4.17.19n"x'tree 2437e3ad974872f2117f3b38a2f732eb4540958c parent 76a009e109eeab5c11a93c940a1e32f810c37a80 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1594983953 +0000 committer GitHub 1594983953 +0000 chore(deps): bump lodash from 4.17.15 to 4.17.19 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.19. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.15...4.17.19) Signed-off-by: dependabot[bot] Ưxtree bfd59f03f9f52f73b4af7b78519c3b9276a95937 parent 7abcbc3ac5934678c5c9e4505f839b42d9d272f7 author Dr.-Ing. Mario Heiderich 1594737085 +0200 committer Dr.-Ing. Mario Heiderich 1594737085 +0200 chore: removed some unneeded test expectations l Ux"tree 50565c0022b7701d0996bb8faf8410b7ab9e7ce2 parent f80a64391f42d62b724b62f51a8b2c1d1a6908f6 author Dr.-Ing. Mario Heiderich 1594733437 +0200 committer Dr.-Ing. Mario Heiderich 1594733437 +0200 fix: Implemented Unicode nodeName check using stringMatch jXxtree d2b95ff5b59c56ee61276b4c002beb4b6d2c92ab parent 46eb8a072eab217e2ca7cc24122d55562d492816 author Dr.-Ing. Mario Heiderich 1594733109 +0200 committer Dr.-Ing. Mario Heiderich 1594733109 +0200 Fixee another test for MSIE's SVG parsing kRVxtree 0863542637675bb3a735f52d9d32cc3218b6864b parent 7144f749de3ebc542cdbaddd863fa7fbcfa337f3 author Dr.-Ing. Mario Heiderich 1594732838 +0200 committer Dr.-Ing. Mario Heiderich 1594732838 +0200 Fixed the tests for another MSIE interpretation Uxtree 2c490cdb7cd571a44983cbd07dd72d700385cb3d parent 96644b2406cd860031402c87e098a48ccb3e2a91 author Dr.-Ing. Mario Heiderich 1594732752 +0200 committer Dr.-Ing. Mario Heiderich 1594732752 +0200 Fixed the tests for MSIE ՏKxtree 3141ae8f27e34562c18910c2dfffcef5769504be parent 78b4307f0f69924e46d172a91372e3489e4bfeb3 author Dr.-Ing. Mario Heiderich 1594732445 +0200 committer Dr.-Ing. Mario Heiderich 1594732445 +0200 Fixed the tests A$Ixtree 14d8816470fb8e68bef25476add47b3bd68c60a3 parent c41d821958190169a08cf40ca04780d22a4439e0 author Dr.-Ing. Mario Heiderich 1594731913 +0200 committer Dr.-Ing. Mario Heiderich 1594731913 +0200 Changed regex to match for Unicode instead of ASCII {Tޖxtree 2a0c299f89b61dd8881f4f162d1f1f8124d801e9 parent 0a09fec2af190a9c6d81fb2c5715f7ca504f8777 author Dr.-Ing. Mario Heiderich 1594731549 +0200 committer Dr.-Ing. Mario Heiderich 1594731549 +0200 Made Unicode check compatible with text nodes Txtree 4407625b57801b58c1a4b1c298e09e7da9162da5 parent 0373530fa9b85c7ee7abc8c99db87683982d919b author Dr.-Ing. Mario Heiderich 1594731430 +0200 committer Dr.-Ing. Mario Heiderich 1594731430 +0200 Addresses a possible bypass with Unicode tags KTxtree 33cef534db4a469ffc59f4f1997fbc34a27529aa parent 7a9e0d3f3b90777ceffe67e9a584e666ea63bd1e author Mario Heiderich 1593009834 +0200 committer Mario Heiderich 1593009834 +0200 fix: addressed an issue with the yarn lockfile 4Qx tree d036f7331ad5be7270cefb3ec70a9ecd8eaf49f3 parent ce98c50bc627ac3ceda887ca24554663e61f1717 author Mario Heiderich 1593008900 +0200 committer Mario Heiderich 1593008900 +0200 chore: Prepared 2.0.12 release ȌIxCtree 297f0e46e06534c81027b769b5831debe35639e9 parent 862d266f6a318df3f17cf336c6a1b20d46e10627 parent 0f302151edceb3d9630afa6163cfcbcdd89d1d8b author Mario Heiderich 1592999290 +0200 committer Mario Heiderich 1592999290 +0200 Merge branch 'main' of github.com:cure53/DOMPurify into main »ax tree 69308110e42941ad33950a78438fa978f89ee325 parent 82ba7ffe1e863107e6fd9d26fc1c7e5162e96908 author Mario Heiderich 1592999154 +0200 committer Mario Heiderich 1592999154 +0200 See #450 chore: changed several labels and comments OϘxtree a47f8d3d3e99db9af18898483e67733b29ae57fa parent 82ba7ffe1e863107e6fd9d26fc1c7e5162e96908 author Cure53 1592991573 +0200 committer GitHub 1592991573 +0200 Update README.md fix: Removed some clutter to fit the new layoutvPxCtree 911a57e85db29d2397ccde8c03c8f8eb7b2f8124 parent 7e12d600e7e66922b6cdcc5f5629eacfbdc99514 parent ecbe00710cb701c3598f46ab79b651ad3a02916a author Mario Heiderich 1592989964 +0200 committer Mario Heiderich 1592989964 +0200 Merge branch 'main' of github.com:cure53/DOMPurify into main bax tree 911a57e85db29d2397ccde8c03c8f8eb7b2f8124 parent edd8d4e1847b376c7046a92ac76b091ba28fe012 author Mario Heiderich 1592989933 +0200 committer Mario Heiderich 1592989933 +0200 See #450 Replaced master by main in docs and scripts sQxOtree 1b3c906f8dc3a0470fdd55badcf530310eeca73d parent edd8d4e1847b376c7046a92ac76b091ba28fe012 parent 8a3773f98acdaab931f341db4866906cc7fc2fc1 author Cure53 1592989909 +0200 committer GitHub 1592989909 +0200 Merge pull request #450 from skyler-b/patch-1 Update README references to `main` branchfxUtree 1b3c906f8dc3a0470fdd55badcf530310eeca73d parent edd8d4e1847b376c7046a92ac76b091ba28fe012 author skyler-b 1592972647 -0700 committer GitHub 1592972647 -0700 Updating README references to `main` branch Fixing a few broken links that were pointing to the outdated `master` branch.o xtree bee4c5450d0a276d7b2ea7ac9f6984949208df49 parent c7c90933b78660cf4448212ea7276a51bfe1d7d2 author Mario Heiderich 1591634558 +0200 committer Mario Heiderich 1591634558 +0200 fix: Hardened one of the demos for better leak-prevention !dSx?tree 9d2f39d2c65dec6adc6f4505ac9203535d6c1638 parent 3be6bf07f8354d1b85ec92f3a23629c5b74d0328 parent 5bf17d708afa9dbe1ba8d362579868bd829007e1 author Cure53 1591609415 +0200 committer GitHub 1591609415 +0200 Merge pull request #443 from numirias/demo-fix Fix advanced config demo\`xetree 9d2f39d2c65dec6adc6f4505ac9203535d6c1638 parent 3be6bf07f8354d1b85ec92f3a23629c5b74d0328 author numirias 1591575305 +0200 committer numirias 1591575305 +0200 Fix advanced config demo The advanced config demo incorrectly assigned `innerHTML` from a DOM node instead of a string. Pt|xtree b85d35a67d37df903c3cb9ad0d80aa069b25d349 parent 5f15780b5bdc84109cfe146fe179b47242fd38a6 author Dr.-Ing. Mario Heiderich 1590339918 +0200 committer Dr.-Ing. Mario Heiderich 1590339918 +0200 Fixed a linter warning TL-x`tree b5ff5f11b45d65259755d013ccf8d69946cdad27 parent f7fc8058a93d2550f47ff6b3498f32307e46e3e4 parent 948343e5220e49430f95a27b8ac26100189794b1 author Cure53 1590238536 +0200 committer GitHub 1590238536 +0200 Merge pull request #438 from masatokinugawa/masatokinugawa-patch-1 Fix lack of RETURN_TRUSTED_TYPE checkL jUx tree b5ff5f11b45d65259755d013ccf8d69946cdad27 parent f7fc8058a93d2550f47ff6b3498f32307e46e3e4 author Masato Kinugawa 1590237902 +0900 committer GitHub 1590237902 +0900 Fix lack of RETURN_TRUSTED_TYPE checkWSx tree 397cd0b25ef9fc933d2885fe2f605f268d741b96 parent 074b5b37aa184e3858549f5478ac0a4c52a1f7aa author Mario Heiderich 1588784806 +0200 committer Mario Heiderich 1588784806 +0200 chore: Preparing 2.0.11 release ZIx#tree d6db4c97ba79d1a6c7d015e1539b6d2bc761d195 parent 33c85d0b835fa6f875a061af6ecb371e22cf5f0a author Dr.-Ing. Mario Heiderich 1588697017 +0200 committer Dr.-Ing. Mario Heiderich 1588697017 +0200 See #433 fix: Added better regex for whitespace detection Xyxtree 59f4c16c675ac039261a3d2c1fdcc5f0105037c7 parent 45dc042a194ff4d9cb527baaa62dca554c8423d5 author Mario Heiderich 1587720446 +0200 committer Mario Heiderich 1587720446 +0200 See #430 docs: Updated Readme to list new ADD_DATA_URI_TAGS flag Sxtree f873ac07e0e6962dd8326d5e347bcf89a8943ab8 parent 2c0134461da5366b66658cc9271e8027a6f97206 author Mario Heiderich 1587656294 +0200 committer Mario Heiderich 1587656294 +0200 See #430 test: Fixed tests accordingly hKxtree d7da540587f21744cf51ce998814b388c02e766e parent 928b1ae21f9712796f7ec05c93d064edaefa1aea author Mario Heiderich 1587656201 +0200 committer Mario Heiderich 1587656201 +0200 See #430 fix: Changed config flag label to ADD_DATA_URI_ATTR ,Rxtree e7cbfa43eaab8f73df56474e84cb0179ff992eb0 parent 9eeac2d69a7bb3ba4a1ee89fe3ae1816b9f7368d author Mario Heiderich 1587655989 +0200 committer Mario Heiderich 1587655989 +0200 See #430 fix: Made sure existing DATA_URI_TAGS are not overwritten W8xtree 8752b0a26bead4502132be9bc5d6a94c7edb9028 parent 7b8add5f2d566ed7b2290ec40ef254f2e02fe969 author Mario Heiderich 1587655211 +0200 committer Mario Heiderich 1587655211 +0200 See #430 test: Added test for exposed DATA_URI_TAGS config flag T8xtree ffddee8a342ee0200240e94fd6bdb85a63b80cd8 parent cd74c0e46a45b80c487c9e604e749dd1668f83aa author Mario Heiderich 1587654739 +0200 committer Mario Heiderich 1587654739 +0200 See #430 feat: Exposed DATA_URI_TAGS to be configurable kQx/tree 47ebd5d54e312070edd9dd6d9b0bd8eb5185a356 parent d1797e93ca5c4b433cbd7ecbaa37e0cbf4c5504d author Mario Heiderich 1587642829 +0200 committer Mario Heiderich 1587642829 +0200 fix: Fixed a test on Chrome 83 relating to trusted types chore: Prepared 2.0.10 release  ^xEtree 7fa9be974cba6e5e8b2d0b3f1cdc0c531350a65a parent 97c9fff11afd14085f32a870a445a5c3c4056123 parent e1086f8929617bba8fda22bbf5ed061886fc291a author Cure53 1587642135 +0200 committer GitHub 1587642135 +0200 Merge pull request #432 from cure53/fix/node-and-nvm fix: remove node and nvm6/bxtree 7fa9be974cba6e5e8b2d0b3f1cdc0c531350a65a parent 97c9fff11afd14085f32a870a445a5c3c4056123 author tdeekens 1587642017 +0200 committer tdeekens 1587642017 +0200 fix: remove node and nvm aQxYtree 0b665ad860481705496f6faba2536fbf9e0fffad parent 4cab8a251a0c1517a760debaa625b27f4ee11eb9 parent 1a768a2ffbf679187f3a4dcb6911c87dfcb0b43a author Cure53 1587628238 +0200 committer GitHub 1587628238 +0200 Merge pull request #428 from LeSuisse/move-node-dev-dep Move node and nvm to the dev dependencies k]x`tree 01cdebbb7a26e0f4cc2c6a07938de8a0c85e8129 parent d626065c62f633c09afb37bc7c13c2c2535b3a04 parent 36ebe041c5f9ffa6096e321f3d9003c22eae7c82 author Cure53 1587628227 +0200 committer GitHub 1587628227 +0200 Merge pull request #429 from LeSuisse/remove-yarn-log Remove yarn error logfile and it to the .gitignore@vmQxRtree a1426c622083a332a3adc918a2934ca6f89d96e0 parent dab2c877cf6970732af0c246655f9c6e26c7c80a parent 94e0c4e89e6c4e0032cf689a1817cc5908ef1129 author Cure53 1587628209 +0200 committer GitHub 1587628209 +0200 Merge pull request #431 from cure53/fix/license-header fix: license header not being addedfzx tree a1426c622083a332a3adc918a2934ca6f89d96e0 parent dab2c877cf6970732af0c246655f9c6e26c7c80a author tdeekens 1587626083 +0200 committer tdeekens 1587626083 +0200 fix: license header not being added /Tn$xBtree 36d9d962fa7b253acff0ae6e313a183aa59a569a parent dab2c877cf6970732af0c246655f9c6e26c7c80a author Thomas Gerbet 1587587994 +0200 committer Thomas Gerbet 1587588360 +0200 chore: Remove yarn error logfile and it to the .gitignore It seems to have been initially committed by mistake in f9e1b1e2a3326558a5a18ce613d2920d59963634 as it serves no purpose in the repository. As this file contains information about the local environment of the developer and to avoid to commit it again by mistake, the file has been added to the .gitignore. xxotree 4e6f61d4bfd3ec276efb4a87e8987d7235dbfe95 parent dab2c877cf6970732af0c246655f9c6e26c7c80a author Thomas Gerbet 1587587277 +0200 committer Thomas Gerbet 1587587277 +0200 Move node and nvm to the dev dependencies Closes #427 node and nvm are not used at runtime by DOMPurify. They initially have been introduced by f9e1b1e2a3326558a5a18ce613d2920d59963634. }x tree 1bd73acf75f6037a2be93cb094fcf17afb77650a parent 26503b24ab57eaa0e2ce7d99bf5f2146a8008580 author Mario Heiderich 1587566286 +0200 committer Mario Heiderich 1587566286 +0200 chore: Preparing 2.0.9 release WmIxPtree fd5cbb4c051829e4164f08423f9eb0f3b138624f parent 3cd853168fc905b151261d0b07d4867ea214896a parent a8d3e6067db1d6f9887a4fe05158bf00a21e0aae author Cure53 1587392473 +0200 committer GitHub 1587392473 +0200 Merge pull request #424 from cure53/fix/add-license-comment fix: add @license to comment7eߕxtree a6fbbb6d9168a3dd50c8aaef66749f2fa09aa0d8 parent 17d6a34818ff2b8712c32050f7c441a50d9bf047 author tdeekens 1587390611 +0200 committer tdeekens 1587390611 +0200 fix: add @license to comment `Rx tree c2e3a03fb56952d40603e3a9e36bf1b8dd57354c parent 17d6a34818ff2b8712c32050f7c441a50d9bf047 author Mario Heiderich 1587385664 +0200 committer Mario Heiderich 1587385664 +0200 chore: minor changes to README HxPtree 70da680c1e4ec475d9095767202a13cc0090cabb parent 02e86d593cdbdcd4edde3b2b0e68a5a82b89bd6b parent ed1fe0092bd36ef2edd9e915d76dfc6f2241d3d3 author Cure53 1587318987 +0200 committer GitHub 1587318987 +0200 Merge pull request #423 from cure53/fix/argv-karma fix: argv parsing with github actionspfhxtree 70da680c1e4ec475d9095767202a13cc0090cabb parent 02e86d593cdbdcd4edde3b2b0e68a5a82b89bd6b author tdeekens 1587318671 +0200 committer tdeekens 1587318671 +0200 fix: argv parsing with github actions )VxLtree 22b8ab24414462e62bc6c3d71a572da80fdca5d1 parent 9c3e525660154bb6d7d4215d34340d7c7d3a7434 parent 0dd9cd16234cd51f297ddddf7a5e24371b8f255b author Cure53 1587318252 +0200 committer GitHub 1587318252 +0200 Merge pull request #422 from cure53/feat/prettier-more chore: apply prettier to moreFe@xtree 22b8ab24414462e62bc6c3d71a572da80fdca5d1 parent 9c3e525660154bb6d7d4215d34340d7c7d3a7434 author tdeekens 1587310026 +0200 committer tdeekens 1587318217 +0200 chore: apply prettier to more RNxCtree ab0abb6e3b00323efebae2dbf614eccca2d3328d parent 8c29b8881fb2b6429404a3d7d07ecc962676db49 parent a4c220ff77250b3c0fa9569823cab9855cd15876 author Cure53 1587316037 +0200 committer GitHub 1587316037 +0200 Merge pull request #421 from cure53/docs/readme-updates docs: update readmeٟbxtree ab0abb6e3b00323efebae2dbf614eccca2d3328d parent 8c29b8881fb2b6429404a3d7d07ecc962676db49 author tdeekens 1587309735 +0200 committer tdeekens 1587309735 +0200 docs: update readme gP:xotree 9b591952bc3774131ccaefbed64b7c189c7de750 parent d63004a7d4dd64c6f4bfdb5356c0f481f078e2e2 parent f2b2d09649e283e72fcf7715e26382394043b5e2 author Tobias Deekens 1587309702 +0200 committer GitHub 1587309702 +0200 Merge pull request #418 from cure53/refactor/update-tooling refactor: to update tooling (rollup, babel et al) to recent versionsmOxtree 9b591952bc3774131ccaefbed64b7c189c7de750 parent 822a83d8f26a3495fe1f52a165d06fafc734a9b8 author tdeekens 1587309252 +0200 committer tdeekens 1587309252 +0200 fix: no formatting on the test-suite file (yet) FYBxtree e328b869c828372d9433ed591a5f060d1c6e0e23 parent 1702e47a2e7a799b89cded66c8a592a3e354af55 author tdeekens 1587309030 +0200 committer tdeekens 1587309030 +0200 chore: add dist files O'xtree bd6bf4709eb285391cf71bd610ab4a1e3d7a4816 parent 1a36017be969327dfc9b6d386b58ff5ae520386d author tdeekens 1587308385 +0200 committer tdeekens 1587309015 +0200 fix: having dependency run Qxtree b23b35d5032f4f71660b4c316f52905b006ecd47 parent b846475da15dc6044be237a2372ecc6ae9c4f4f0 author tdeekens 1587306516 +0200 committer tdeekens 1587309015 +0200 chore: format files in config with prettier sWxtree c2f4427ef1e8e7bddfc3987f0113cc44877de984 parent 0ff86a1c7b3f5a10130aaf2efbfe990cc37ac959 author tdeekens 1587306456 +0200 committer tdeekens 1587309015 +0200 fix: fix karma config Pxtree 8dafc4ff73d0e034bab22b845a8b0707e3120c0b parent b5fe4e1e21cad95593708ca3a53e2c2b0175ea1c author tdeekens 1587306420 +0200 committer tdeekens 1587309015 +0200 fix: add badge to readme qQxtree 4a3f08a94a4036e2b50786971f7bfb0392e68623 parent 80e53f35fae11a6fab41e6dd4974237165744105 author tdeekens 1587306155 +0200 committer tdeekens 1587306177 +0200 feat: add nvmrc 2aL,x tree 5cf5d14f1f7dc2d9141340e97da6e0267246926e parent 401d319896672d86b4c00826be52a86c0f0d0da0 author tdeekens 1587243529 +0200 committer tdeekens 1587306177 +0200 refactor: to follow updated linter umTxtree 355703c497e663fc8864fd8fb6a17f05f1276e3d parent ddf3ec6166b2f7a7b5963eaa6a3fc9338603b224 author tdeekens 1587243095 +0200 committer tdeekens 1587306177 +0200 chore: format rollup config with updated prettier QRZx tree 367639f7b9d6fbfb011cfe840e161a783daba014 parent 0828bfe80308078effe048d1c19c399be78258ae author tdeekens 1587243008 +0200 committer tdeekens 1587306177 +0200 chore: format with updated prettier Ux tree ccb24c08a64536e147e44fe5522e0d05d69a7cf9 parent d74f253f2d4c34c5440c232e8a19d12f5d3c410a author tdeekens 1587242935 +0200 committer tdeekens 1587306177 +0200 feat: update babel and use terser KSڕxtree 45919e8915dc261b624594393451fc94fdbdfeee parent a33076e5c4206ceca5e84972614f0c7d93ec7f0b author tdeekens 1587242916 +0200 committer tdeekens 1587306177 +0200 fix: no pkg.lock temporarily kRxtree d124e5eb695dc55bcdb16dcd9c4cef71bae84679 parent ddf7996dd960cb35a83abb426aec6208c957e622 author tdeekens 1587242544 +0200 committer tdeekens 1587306123 +0200 fix: to not use deprecated cjs plugin ]Vxtree f57739a6eb245ccec0fdceab88b9efecf29333af parent d63004a7d4dd64c6f4bfdb5356c0f481f078e2e2 author tdeekens 1587242421 +0200 committer tdeekens 1587306123 +0200 chore: update deps f-PHxdtree cc737f6ef8830d7f194b269d0bcfae38075f3c82 parent 2b52339a39ec44ef893129b36878b58692445365 parent e0e109126eb7b0b9dfe999217bf337b392210178 author Cure53 1587306055 +0200 committer GitHub 1587306055 +0200 Merge pull request #419 from cure53/refactor/gh-actions feat: add github actions workflow and removes travis m xtree cc737f6ef8830d7f194b269d0bcfae38075f3c82 parent 374fb63ec85921b15a39a9f9a14cf267e052ad96 author tdeekens 1587305510 +0200 committer tdeekens 1587305510 +0200 fix: mistyped another env variable (sunday) n Xx tree d09afde597b9c547f1ae160516fdfa9ac60a8734 parent 7c80219fede586431cf55f5fb9f87ac8b0fc2973 author tdeekens 1587305232 +0200 committer tdeekens 1587305232 +0200 fix: test not having draggable attr *EUx tree 6583ed348f8e007ef8a7e328fa435eeb5dc917a1 parent d9f073a92e744b913be3c791e3c7e9d7728fc431 author tdeekens 1587296581 +0200 committer tdeekens 1587296985 +0200 fix: typo in workflow :face_palm: T{xtree 694205b440f0cb5e2d0571d8bcac67c6d61ef462 parent 8c02a2968df358b5fd6383fd8a9d3bd54ad20b47 author tdeekens 1587294795 +0200 committer tdeekens 1587294898 +0200 fix: use xvfc action and fix env var name Wxtree 070dffad4ac9030f63702de97c705868927fb85c parent bbeb92a8b3b2fd6563367fc8a5bd8f96d6d031a9 author tdeekens 1587287219 +0200 committer tdeekens 1587287219 +0200 feat: remove travis.yml RQWx tree be8808dd894fec7a472165510c878c0e335f2c34 parent 2b52339a39ec44ef893129b36878b58692445365 author tdeekens 1587287196 +0200 committer tdeekens 1587287196 +0200 feat: add github actions workflow SxJtree aeaa0392a684c338cb2a79fb111928752e877f74 parent ae47d87c8439b7e1821cd0bb209e02a276384cb0 parent ac0b8b77842ecf5dce5a0e5caa8498fef19e4e17 author Cure53 1586539433 +0200 committer GitHub 1586539433 +0200 Merge pull request #414 from Malvoz/attributes Additional standard HTML attributesex_tree aeaa0392a684c338cb2a79fb111928752e877f74 parent a843e3ad921b09c8b07ed41cb969ad4935edadbe author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586524017 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586524017 +0200 Allow the `draggable` attribute https://html.spec.whatwg.org/multipage/dnd.html#the-draggable-attribute XqFxWtree e7819ae85c0e1ad57047be16c7140c16586b26b0 parent cd14920a0f48d99a93d2f3b69ff0ba82099d537e author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586521640 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586521640 +0200 Revert "Allow the `is` attribute" This reverts commit 1003bb4e7969dba297ed3dcead6f48de04658f46. hžxntree 6e33b88b60e78b736ba7fd5d62c1000904362a36 parent 1505af51f7ea8bf62d95495b0ee4f0eac0500ab0 author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586473075 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586473075 +0200 Allow the `disableremoteplayback` attribute https://www.w3.org/TR/remote-playback/#the-disableremoteplayback-attribute vx tree 0c44fbce148b0037e5f15adcf2ced314e4e5be86 parent b73a3f8540063035c3dd9f2820b870927f16ab69 author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586473024 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586473024 +0200 Allow the `autopictureinpicture` + `disablepictureinpicture` attributes • https://w3c.github.io/picture-in-picture/#dom-htmlvideoelement-autopictureinpicture • https://w3c.github.io/picture-in-picture/#dom-htmlvideoelement-disablepictureinpicture UxTtree f5c6c575de80d8ea8b780718da2b2d76b1f6d2c4 parent c4c13b0d975b12919e847890bd77e344ca1a0057 author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472855 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472855 +0200 Allow the `kind` attribute https://html.spec.whatwg.org/multipage/media.html#attr-track-kind (lmxVtree 03f70163f8242ddfee1e0d6ebe6efd8734918ea9 parent 6977a0c9dfa281280d5376d7a454a255c26d51f1 author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472782 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472782 +0200 Allow the `muted` attribute https://html.spec.whatwg.org/multipage/media.html#attr-media-muted mQx|tree 53a56f0eeb66b4158cc6b78a19bd5121bd16d63e parent 0efdef9ecce56cadeb48de7079abec4b25f5dd07 author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472744 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472744 +0200 Allow the `controlslist` attribute https://wicg.github.io/controls-list/html-output/multipage/embedded-content.html#attr-media-controlslist xbtree 1499418d5093db59fc18094a4859130e11d82c9c parent b866148fe131922cb8026c894f58128c5abb5af8 author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472694 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472694 +0200 Allow the `playsinline` attribute https://html.spec.whatwg.org/multipage/media.html#attr-video-playsinline qdx\tree 97f142399c15e343a935f47e8289159b9deac7d2 parent 1003bb4e7969dba297ed3dcead6f48de04658f46 author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472625 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472625 +0200 Allow the `autoplay` attribute https://html.spec.whatwg.org/multipage/media.html#attr-media-autoplay pxTtree 76dff8d3866f360f619332a660254eec4835d26b parent f25894d176ddd5422f9ade5c26a3d4dcaa68653e author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472584 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472584 +0200 Allow the `is` attribute https://html.spec.whatwg.org/multipage/custom-elements.html#attr-is lΖxVtree 510422018722f5b94314b5f2e9ca6f7b75136ae3 parent be97ca3d1224903c07ceb4c6574524d3d7fe0e31 author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472553 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472553 +0200 Allow the `translate` attribute https://html.spec.whatwg.org/multipage/dom.html#attr-translate OmxUtree 8b2b653c027028d8c5900b8b2fa291e3ad605335 parent 72d1a0c137899410f28df9e5f6637bcd86520c2c author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472509 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472509 +0200 Allow the `capture` attribute https://w3c.github.io/html-media-capture/#the-capture-attribute rkПxtree f9b3fae3f46498fe25e2fab764078b3ae5f23a58 parent 7893caf0a156310036d2d1fd6bf781d29511c53f author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472470 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472470 +0200 Allow the `enterkeyhint` attribute https://html.spec.whatwg.org/multipage/interaction.html#input-modalities:-the-enterkeyhint-attribute [~Kx^tree 7df709475971adaaa6645e4da927096eb8edc198 parent 4eb39db6555713f0567f08275157952a89cc3704 author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472413 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472413 +0200 Allow the `inputmode` attribute https://html.spec.whatwg.org/multipage/interaction.html#attr-inputmode zpHxhtree 9374c078d70ae94a83b3df3941625dacb7108712 parent 308cd2ea7c7cf5a44daf2ecdd215c3173cbb122d author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472363 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472363 +0200 Allow the `autocapitalize` attribute https://html.spec.whatwg.org/multipage/interaction.html#attr-autocapitalize }ux]tree 781f6a07cbd762f9d74ca01a2955c9819c7f2a93 parent 23a9ba7b47d64bb33fb2c7ca97110cb642467b84 author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472275 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472275 +0200 Allow the `decoding` attribute https://html.spec.whatwg.org/multipage/images.html#image-decoding-hint oxktree 0d73e70ef79796afbcc2a9f5f8a30ab89683cdc7 parent ae47d87c8439b7e1821cd0bb209e02a276384cb0 author Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472227 +0200 committer Malvoz <26493779+Malvoz@users.noreply.github.com> 1586472227 +0200 Allow the `loading` attribute https://html.spec.whatwg.org/multipage/urls-and-fetching.html#lazy-loading-attributes `v8xdtree 007225dbc4a33f3cc553e437fdc7387248ee6745 parent f780cc11ebcdf26a8ec97936bfd4aedafa4ffd05 parent bfbc087db5ab898b491ff94b809dd5cd4b6690d0 author Cure53 1586004112 +0200 committer GitHub 1586004112 +0200 Merge pull request #411 from cure53/dependabot/npm_and_yarn/minimist-1.2.3 Bump minimist from 1.2.2 to 1.2.3m/!xtree 007225dbc4a33f3cc553e437fdc7387248ee6745 parent f780cc11ebcdf26a8ec97936bfd4aedafa4ffd05 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1585967872 +0000 committer GitHub 1585967872 +0000 Bump minimist from 1.2.2 to 1.2.3 Bumps [minimist](https://github.com/substack/minimist) from 1.2.2 to 1.2.3. - [Release notes](https://github.com/substack/minimist/releases) - [Commits](https://github.com/substack/minimist/compare/1.2.2...1.2.3) Signed-off-by: dependabot[bot] wxtree 90fbb8813bef9fd24e3fa93cfe9039140fe40c14 parent 2340ed2f408f4b47aa7e594983450ce4b9839461 author Mario Heiderich 1585818608 +0200 committer Mario Heiderich 1585818608 +0200 See #409 Completed the defaulting to DOMParser, fixed some comments V%x tree f1ae71a1e500b6b6693dfc9e946f5afb89503bd0 parent 1c41ef1f2104df0549973b8f3a06ce322cd6d08d author Mario Heiderich 1585816387 +0200 committer Mario Heiderich 1585816387 +0200 See #409 Made sure DOMParser API is used by default Ox tree 6c10aa3a4b226ada00100dd5a5005e9a13037b8a parent cd1f7445fa4a22469c4f920d8ebd394e179921c7 author Mario Heiderich 1585816038 +0200 committer Mario Heiderich 1585816038 +0200 Removed the useDOMParser logic ąIxctree 5481dd5c6c2251063c841437c11b3bed3f707e0c parent 8cc08c3f042376d6e00140d4a1be68bd88ae97b9 parent b2e4911f16e91926d1e0ab94ead0a696aa59436a author Cure53 1585143785 +0100 committer GitHub 1585143785 +0100 Merge pull request #407 from mscheele7/master Update license header to point to specific version of LICENSEClx"tree 5481dd5c6c2251063c841437c11b3bed3f707e0c parent 75c401ed70496196c3b3a9d9452f13b1fc264ed5 author mscheele7 1585075705 -0500 committer mscheele7 1585075705 -0500 Updating license header to point to exact version of license file 0[xTtree 656669b0b4ebc1b79b878397048d0ff61e5650ba parent eec3beb91306331ac0c24cb73f522864520beb18 parent 8cc08c3f042376d6e00140d4a1be68bd88ae97b9 author mscheele7 <61436035+mscheele7@users.noreply.github.com> 1584972708 -0500 committer GitHub 1584972708 -0500 Merge pull request #2 from cure53/master Update from original{h(xtree 656669b0b4ebc1b79b878397048d0ff61e5650ba parent 683a8c83bce86de9fe1f8428ceebea2bc7bc1ec8 author Mario Heiderich 1584953290 +0100 committer Mario Heiderich 1584953290 +0100 Modified README regarding DOMPurify.removed _Obxtree 0c1ca94f7519db6f92de90f648e6f831e681c01e parent 41ce755a24821b6cfbaf78c1c34bc442c1d3babd author Dr.-Ing. Mario Heiderich 1584864434 +0100 committer Dr.-Ing. Mario Heiderich 1584864434 +0100 fix #401 Added track element to data URI set @S!x`tree 0db357638f05e92f94228a46fc769f5fbb62d52a parent 6c3e2cff513f0e8e8bb664849a6b84b40f7b9aa9 parent 84663b4bb91148618a264d135981a28c06606814 author Cure53 1584255712 +0100 committer GitHub 1584255712 +0100 Merge pull request #398 from ktravers/add-startoffset-svg-attribute add startOffset to svg allowed attrsVlܕx tree e13d7665ea2c3e95f10190b91fa66988f5477374 parent aeaa15e641e805380bb48015b0fc981f044f9e04 author Kate Travers 1584225031 -0400 committer GitHub 1584225031 -0400 add startOffset to svg allowed attrsK7xdtree cccb26352a0fe61969feb754fd0765ce746ca582 parent 37766cb98f021d5910396d7f6184c90e7cf9ad17 parent 241b1e223893a21715b69cfbedaddbf6cd22abaa author Cure53 1584170818 +0100 committer GitHub 1584170818 +0100 Merge pull request #397 from cure53/dependabot/npm_and_yarn/minimist-1.2.2 Bump minimist from 1.2.0 to 1.2.2Ol$!xtree cccb26352a0fe61969feb754fd0765ce746ca582 parent 37766cb98f021d5910396d7f6184c90e7cf9ad17 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1584135093 +0000 committer GitHub 1584135093 +0000 Bump minimist from 1.2.0 to 1.2.2 Bumps [minimist](https://github.com/substack/minimist) from 1.2.0 to 1.2.2. - [Release notes](https://github.com/substack/minimist/releases) - [Commits](https://github.com/substack/minimist/compare/1.2.0...1.2.2) Signed-off-by: dependabot[bot] 6rxltree 362ebfacd3b4847e43d34ede2e1a624fbb51bdea parent aeaa15e641e805380bb48015b0fc981f044f9e04 parent eec3beb91306331ac0c24cb73f522864520beb18 author Cure53 1584090726 +0100 committer GitHub 1584090726 +0100 Merge pull request #396 from mscheele7/master Update uglify configuration to preserve license comment in minified JS rxtree 362ebfacd3b4847e43d34ede2e1a624fbb51bdea parent 435f8718c9443182a105953486aacb0ba9a50543 author mscheele7 1584035145 -0500 committer mscheele7 1584035145 -0500 Updated uglify config to preserve license in minified JS 6XxVtree 9bfd8732c3248b4869ec07a902500863e02f1a21 parent f0d69cf96ecbc31daaa2375fbeb549f781d11a93 parent aeaa15e641e805380bb48015b0fc981f044f9e04 author mscheele7 <61436035+mscheele7@users.noreply.github.com> 1584028711 -0500 committer GitHub 1584028711 -0500 Merge pull request #1 from cure53/master Updating from originalwi xtree 9bfd8732c3248b4869ec07a902500863e02f1a21 parent 916a4a784dad64f5bb466f77d30ccf9924852e3a author Dr.-Ing. Mario Heiderich 1583250757 +0100 committer Dr.-Ing. Mario Heiderich 1583250757 +0100 Slightly restructured README Mxtree 0a15f3ac7ad4999d1dfafc48183f7bfa65fa520c parent 8d2e1b23d5c1f9c44c1106387d0965921a390ac8 author Dr.-Ing. Mario Heiderich 1583250550 +0100 committer Dr.-Ing. Mario Heiderich 1583250550 +0100 Added a line to README about how to use sanitized HTML [VAxtree a7ea08190a53357c11a6f80a92a102f4a4df2862 parent ec07443f79205fd56c7125ee880e32f1bb768bc1 author Mario Heiderich 1583227649 +0100 committer Mario Heiderich 1583227649 +0100 Fix broken builds ߐDxtree 286585e7e72d0be9e596c25d9f1bd09f3c8a90c2 parent c05124f77583db33c2d4708d43427a6394ec0014 author Mario Heiderich 1583225740 +0100 committer Mario Heiderich 1583225740 +0100 Fixed a warning from babel ?Gkxtree a7ea08190a53357c11a6f80a92a102f4a4df2862 parent f9e1b1e2a3326558a5a18ce613d2920d59963634 author Mario Heiderich 1583224735 +0100 committer Mario Heiderich 1583224735 +0100 Fixed yarn error 4/n \Dxtree 4923b020a6254401f30defea60bf55b91b590ea5 parent 5e5b5a108961136b44da35e795bd9126b413fc3d author Mario Heiderich 1583224540 +0100 committer Mario Heiderich 1583224540 +0100 Fix yarn error 3/n Dfxtree 9a3b4d1fe4b20aae83125224686ef3d23a234034 parent b815c88a0c1eef910e2c4b8d33b5ce311ae37241 author Mario Heiderich 1583222235 +0100 committer Mario Heiderich 1583222235 +0100 Fix yarn error 2/niDxtree 5d31326758d1f4e112e37ce2df8743e452bea994 parent a27e25e34040c02896d473108676673f274d10c6 author Mario Heiderich 1583221747 +0100 committer Mario Heiderich 1583221747 +0100 Fix yarn error.*B}x tree c9697456b7e73efa49167874ae4a540d82a8f532 parent d16660eaeac62494c8a58f08fef9ff35d521420f author Mario Heiderich 1583219913 +0100 committer Mario Heiderich 1583219913 +0100 Added shorter license header 6*I3x_tree 39187c8a7415303ad3f33561c2b67d18f838d287 parent 48688dde2f77c78d48db6e5401a065d8319c1718 parent f0d69cf96ecbc31daaa2375fbeb549f781d11a93 author Cure53 1583219797 +0100 committer GitHub 1583219797 +0100 Merge pull request #394 from mscheele7/master Update build to inject license text at start of artifactsPlxtree 39187c8a7415303ad3f33561c2b67d18f838d287 parent 989fa6cb5ff93856eca13f87aabfc914a43e2046 author mscheele7 1583161469 -0600 committer mscheele7 1583161469 -0600 Updating package-lock.json %Mxtree 6f1baa5b9acf43b251924b59407f685412fe012e parent 48688dde2f77c78d48db6e5401a065d8319c1718 author mscheele7 1582914104 -0600 committer mscheele7 1582914104 -0600 Updating build to inject license text at start of output files Zxtree 4a1507b29dd053fdc886ba4afdef52215deb487b parent 1d6c6098404284f23cd669a5614d14b3c8bee58a author Dr.-Ing. Mario Heiderich 1581176155 +0100 committer Dr.-Ing. Mario Heiderich 1581176155 +0100 Added note about isSupported KNxUtree 3b4eecd15de380012f8bc43fc6a51c10775708cd parent 2ab021531c35a3ce14cd321eea2c949d7052849d parent 4562b9e6af90b53929d4ff5abc246fe4f82f2bea author Cure53 1581061755 +0100 committer GitHub 1581061755 +0100 Merge pull request #390 from danielsogl/patch-1 docs(readme): adjust invalid sanitize exampleXiLxtree 3b4eecd15de380012f8bc43fc6a51c10775708cd parent 2ab021531c35a3ce14cd321eea2c949d7052849d author Daniel Sogl 1580881453 +0100 committer GitHub 1580881453 +0100 docs(readme): adjust invalid sanitize example:Lxtree 20315b46055aa28ea085551fbf5ae5d3cf05d167 parent 207cd59b5af8032272115ae954e625354de0a4fd author Dr.-Ing. Mario Heiderich 1580737612 +0100 committer Dr.-Ing. Mario Heiderich 1580737612 +0100 Fixed tests for older Chrome Mxtree 7bfe6634fd6e026b4bbb61910e94b2efa656e74a parent 3afdf81ec94bde3b334d8f1c7dcbe029ec914fb7 author Dr.-Ing. Mario Heiderich 1580580950 +0100 committer Dr.-Ing. Mario Heiderich 1580580950 +0100 Prepared 2.0.8 release Lxtree f6a2b70c5fc2b5c8761bbbb9c5824f09eff40af3 parent c90e975360391296cd157adb8ded22615c7fe2ea author Dr.-Ing. Mario Heiderich 1580569891 +0100 committer Dr.-Ing. Mario Heiderich 1580569891 +0100 Preparing 2.0.8 release L{x*tree 5e145527d4115069c98f2cf91496979b9d20ff8d parent 3948e9f2496db7dc89b7fbcd2a0545c620177296 author Dr.-Ing. Mario Heiderich 1580569294 +0100 committer Dr.-Ing. Mario Heiderich 1580569294 +0100 Added a fix for a SAFE_FOR_JQUERY bypass found by Masato Kinugawa Y5x^tree 5de479ba7639c2b1ab58db29812835a8471bb0e7 parent 38662885b4283a338993561157eeaec9302bc167 parent a315ce6af8172e3ffda2abce0e96fdde4202724f author Cure53 1580566823 +0100 committer GitHub 1580566823 +0100 Merge pull request #389 from mikesnare/feature/node-removal-demo Adding a new example for node removalN lxtree 5de479ba7639c2b1ab58db29812835a8471bb0e7 parent 38662885b4283a338993561157eeaec9302bc167 author Mike Snare 1580476112 -0500 committer Mike Snare 1580476112 -0500 Adding a new example for node removal ɶKPx_tree 2c9fffdb20c8c26b7adbc0d7e8adee1c596be741 parent 038732975fe1f21732d07efcb8661ee30684cc48 parent d06af98e5f86bbfd39fcd19beef68f2566a22969 author Cure53 1579590347 +0100 committer GitHub 1579590347 +0100 Merge pull request #386 from dejang/shared-utilities [part1] Shared libs to prevent prototype poisoningonxtree 2c9fffdb20c8c26b7adbc0d7e8adee1c596be741 parent 58980e28f42c69476639c9d6b9951afec2d28ad2 author dejang 1579585225 -0800 committer dejang 1579585734 -0800 Shared libs to prevent prototype poisoning MVxwtree 31f62ed0b86fc74204a6dac9819737c5643edb82 parent b30321bdd141c62f0188ddcb7aed4ce32204107a parent 58980e28f42c69476639c9d6b9951afec2d28ad2 author Cure53 1579353160 +0100 committer GitHub 1579353160 +0100 Merge pull request #385 from devinrhode2/uponSanitizeAttr-forceKeepAttr More conservative uponSanitizeAttr.forceKeepAttr = truevx#tree 31f62ed0b86fc74204a6dac9819737c5643edb82 parent a50fc24b6a08af24ffe068258a1be93be0f13247 author devinrhode2 1579121263 -0600 committer devinrhode2 1579121263 -0600 Allow uponSanitizeAttribute to set hookEvent.forceKeepAttr to true/false ]Nxtree e54262a72978530968ee6a4f04bbc49f48a46cbd parent b30321bdd141c62f0188ddcb7aed4ce32204107a author devinrhode2 1579119318 -0600 committer devinrhode2 1579119318 -0600 run prettier on readme TJ$xtree 0a0ae4b1fd859777c72ffc6a5ae9dc6d23714016 parent d56f47b076387427258a40a6ce04e3e2ebef5762 author Dr.-Ing. Mario Heiderich 1578658595 +0100 committer Dr.-Ing. Mario Heiderich 1578658595 +0100 See #380 Fixed commit pJx!tree 15ac9afd37079e857534cf016450b11b87f7df41 parent 1c14f803d6c2dd7fba086719048e96a20a63cd49 author Dr.-Ing. Mario Heiderich 1578650410 +0100 committer Dr.-Ing. Mario Heiderich 1578650410 +0100 Fix #380 Made sure that IN_PLACE cannot work on strings RUxtree 2db37128742d3f56406d0acaa4628cfb15e02343 parent 345e214364baad170af85cde202dac54e438b417 author Mario Heiderich 1576940661 +0100 committer Mario Heiderich 1576940661 +0100 Force rebuild BCXxGtree 1a86ad1737e2d1a82d8a8ec7617af52b25d23dbc parent ac3da9f62d0922d19b88f7a582dc8e578308ca65 parent d879f776b98cb2e55ab91aa6656355ee6dc435fa author Cure53 1576925314 +0100 committer GitHub 1576925314 +0100 Merge pull request #378 from chris-morgan/picture Support the element-dxtree ff1b6b7e3e09386c655a19548889e3bf9ab25604 parent 544eba2179ca306d40f55e72e879984b83576871 author Mario Heiderich 1576838816 +0100 committer Mario Heiderich 1576838816 +0100 Fixed a typo Z|B=xtree 991d79f368d84b7ba74668147d84601960603bc4 parent 65c28436cfb2a3d905726c489b65a834417a1357 author Mario Heiderich 1576838707 +0100 committer Mario Heiderich 1576838707 +0100 Added @oreoshake to donor mentions IӖx tree 909ac755235f8dd3f7d131d3e03b528ef4b118db parent b9217cc86ace3cdecc81a33636c9f45d5f7c5628 author Chris Morgan 1576806562 +1100 committer Chris Morgan 1576806839 +1100 Support the element Lix8tree 9c7b06ef5d75505569d301e668e6e1688b0d5a97 parent 65c28436cfb2a3d905726c489b65a834417a1357 author Chris Morgan 1576806759 +1100 committer Chris Morgan 1576806839 +1100 Update package-lock.json for 2.0.7 release This change was triggered by running `npm install`. \a9xtree 372a150615b727bdc6c37fc75a4d76736c0305c9 parent 3306303f4c44133919f776080ffccfa248c37292 author Mario Heiderich 1573475310 +0100 committer Mario Heiderich 1573475310 +0100 See #376 Likely fixed the TT tests Hxetree 5ef1cda5ad2b6fc3459a2d717af646999682c755 parent 2a7a65a723a20ba8ee849c7165f94aa252d6e569 parent a4dffb483c7233acdca8213e670c46ba3dd24199 author Cure53 1573475254 +0100 committer GitHub 1573475254 +0100 Merge pull request #376 from koto/ttfix Updated the demo and the code to the current version of Trusted Types}nӛx+tree 5ef1cda5ad2b6fc3459a2d717af646999682c755 parent 2a7a65a723a20ba8ee849c7165f94aa252d6e569 author Krzysztof Kotowicz 1572969752 +0100 committer Krzysztof Kotowicz 1572969752 +0100 Updated the demo and the code to the current version of the Trusted Types API. A)_!x tree 81ace72f462a5bf73eb4aa055910c99c92481668 parent 606103b6a0d40aab35f33324dce6b1881435432b author Mario Heiderich 1572940289 +0100 committer Mario Heiderich 1572940289 +0100 Added dcramer as first sponsor I I' x&tree 6ffedc29b95e19cf51438d3cc4902f639b585427 parent 1e1c08ba8bc76b373c88eb7a4463da99220954e4 author Cure53 1571984370 +0200 committer GitHub 1571984370 +0200 Update FUNDING.yml?x tree 9ff1e136d72caace21fbb9a1433bf525218e11c4 parent 39e503d9b9759fde488a8a63e7ffa1489fd8faa5 author Mario Heiderich 1571684817 +0200 committer Mario Heiderich 1571684817 +0200 Attempting a more reasonable fix for #372 and #373 &PWxMtree 1dac522e9ccd05d20bd4cd9599b34961537d40a7 parent bb953c58f8e3e262b16c02b0f50638248bc7261d parent ec8968b193efdb6ff3e42280b9efbaeda1f0e0f5 author Dr.-Ing. Mario Heiderich 1571660589 +0200 committer Dr.-Ing. Mario Heiderich 1571660589 +0200 Merge branch 'master' of github.com:cure53/DOMPurify [`dx tree 00c7f7f3b971671dcdb3c5aabc1bbfcf62d717ee parent a962aa5d64a8075e3e97c535d28488661410214e author Dr.-Ing. Mario Heiderich 1571660515 +0200 committer Dr.-Ing. Mario Heiderich 1571660515 +0200 Slightly changed README contents @Oxtree 91b6337099b1d444eec2cc2b3d15ca087d32a0ec parent 48565f1f204b3ce80938dceb669e85dcb4c2d806 author Mario Heiderich 1571657146 +0200 committer Mario Heiderich 1571657146 +0200 Added a missing whitespace to tests, moah... INxtree 072946130a3098d38a1e7e3618b032415dcacc09 parent 62435fa89e715fd1ee7b27416a31c2a9f0ac322a author Mario Heiderich 1571655390 +0200 committer Mario Heiderich 1571655390 +0200 Added missing newline to one of the tests t~Mxtree 2bff12f215b90945b54f0fe1f0e964d696368178 parent 3dbc2f86d30e5ca26bf86ab1a08879a9bd43e818 author Mario Heiderich 1571653682 +0200 committer Mario Heiderich 1571653682 +0200 Fixed the tests for Edge 15 and MSIE11 5JxBtree be889dcff7b883a2a486222d55857a2899da59d9 parent 7e16a416eaa4fdbef214c194cfc75d74ee1a7c1b parent a962aa5d64a8075e3e97c535d28488661410214e author Mario Heiderich 1571651658 +0200 committer Mario Heiderich 1571651658 +0200 Merge branch 'master' of git@github.com:cure53/DOMPurify.gitaԕxtree c38a7858529c1cee735c4a8c4a701932f88d7c8f parent 8be3109dc2fb05e91ebd519d7ed1072e8860c95b author Dr.-Ing. Mario Heiderich 1571575974 +0200 committer Dr.-Ing. Mario Heiderich 1571575974 +0200 Expanded the credits section Nxtree 05945809b3ea5a735951893381680735eee276dd parent df04efccb74c0c8e3f80e7584f2938723fe96085 author Mario Heiderich 1571480846 +0200 committer Mario Heiderich 1571480846 +0200 Fixed a reference error in MSIE11, see #372 Kxtree c8ccadd86f63cc79f46818ee14cc1ad904c2e8b0 parent 084bc6c14c5157e19b47231047f01af2b41c353f author Mario Heiderich 1571241824 +0200 committer Mario Heiderich 1571241824 +0200 Preparing 2.0.7 release 8Fx;tree a41004da142b538307db80707aca847ef9a4d0b1 parent b7e9a409c9eb4c22cdf345f1a0d2755392395713 parent 8be3109dc2fb05e91ebd519d7ed1072e8860c95b author Mario Heiderich 1571241621 +0200 committer Mario Heiderich 1571241621 +0200 Merge branch 'master' of github.com:cure53/DOMPurify ^`x.tree 35246515007c3726c7162847a6dbcc06cb72e510 parent 13fd8eb22a4c42736a8bc370d2bd223e0d313248 parent 615f9de0b77398234894f7ff128017c93e90ce58 author Cure53 1571218207 +0200 committer GitHub 1571218207 +0200 Merge pull request #371 from strugee/patch-1 Fix typosH X` x)tree 35246515007c3726c7162847a6dbcc06cb72e510 parent 13fd8eb22a4c42736a8bc370d2bd223e0d313248 author AJ Jordan 1571176939 -0400 committer AJ Jordan 1571177019 -0400 Fix typos =x tree ec4691475480c4cc67550536325cf2e5b72cf1ef parent b80218e5103e4eec47cf0818e7798a60416c64ea author Mario Heiderich 1571127843 +0200 committer Mario Heiderich 1571127843 +0200 Added missing modifier flag _HExtree 9eac7cea49e2caac8da7e02191d41f4f3078c8b7 parent 20b3409e30ee9d44021919799c3916bfac7140ce author Mario Heiderich 1571066000 +0200 committer Mario Heiderich 1571066000 +0200 Added math to namespaces to look out for 7Mx tree 094fb3fb8a53f971a7e05c920a9ab2cdf300f52c parent 859da16766d24a02e5907eb46f1f50036abbd21a author Mario Heiderich 1571064475 +0200 committer Mario Heiderich 1571064475 +0200 Fixed the tests to reflect the new sanitzer checks 4Qx tree 3f8d027147daa2552937e2e05b0246b12a71ac7d parent df2e2ab62c6c4a7275b17fc610ce0203f34c51ac author Mario Heiderich 1571063071 +0200 committer Mario Heiderich 1571063071 +0200 Re-added SVG to forbid content I<xtree d610ac7558416ab25d08f484eec1cd5b6660b8ac parent 1ca7baaaf565370cb67d591e59cf0827e587a401 author Mario Heiderich 1571062940 +0200 committer Mario Heiderich 1571062940 +0200 Fixed a typo "SCbx tree f40eca86a0f62775efd02ead2c6982bd060d0f06 parent 5b8fd9e951e6fcd5e94711da6d89541bcd812f20 author Mario Heiderich 1571062499 +0200 committer Mario Heiderich 1571062499 +0200 Experiementally removed svg from forbid content map VS#xtree de43374b0aa7bf29c56e98e8dd7b7118a9661775 parent 190e3d7ae0e342a85010e1411743077c51294c4a author Mario Heiderich 1571062426 +0200 committer Mario Heiderich 1571062426 +0200 Fixed a typo UBxtree efb4591a3e97c2939198c1e71da83882e0a6d290 parent 7d2f46813423f4a38d20e4e6fcc4ecf61db3aebb author Mario Heiderich 1571062238 +0200 committer Mario Heiderich 1571062238 +0200 Made the mXSS check work for all FORBID_CONTENT elements mR6xtree 62bc64020e72ed53ae208b687894dee8a47e145f parent aece2b9d87a2de2c8a71ad0c947ae9747725ba3a author Mario Heiderich 1571058146 +0200 committer Mario Heiderich 1571058146 +0200 Refined the mXSS check even further to avoid false alerts T<xtree 6ad89f48644ee25275f2c686a815ab30b8565f38 parent fbd3064a2f41930812a5812a2b2c6fa6fde0d0e8 author Mario Heiderich 1571057203 +0200 committer Mario Heiderich 1571057203 +0200 refined the mXSS check _ F]xtree 94315245de94deccf760bb5da11f66fe0937adab parent 13fd8eb22a4c42736a8bc370d2bd223e0d313248 author Mario Heiderich 1571053699 +0200 committer Mario Heiderich 1571053699 +0200 Added better check for attribute based mXSS 1Nҙ x&tree 7e3488e4af700237ba59459fb63769b2cf74b4b3 parent 9ca2d93d7c25b99d7c0e950a2e6a1da4afe0a4fd author Cure53 1570727206 +0200 committer GitHub 1570727206 +0200 Create SECURITY.md>@0xtree 84cb83fa725419a3a3ccc853a3e378e4c5888ab4 parent 40fcbba05f98d334c4f8ba79d2618f93eabe25bf author Dr.-Ing. Mario Heiderich 1570727114 +0200 committer Dr.-Ing. Mario Heiderich 1570727114 +0200 Added security info to README _Nxtree b721cf4ebb3771e995a4a5ea2128bc1a72db6e9c parent 333b410576081bdb890f84274f4bad8412758095 author Mario Heiderich 1570696835 +0200 committer Mario Heiderich 1570696835 +0200 Preparing 2.0.6 release UF#xtree c50ad78d2ed189114600e1e1159623b6a55c3b63 parent 7d428f3c4f8805c6b30b8414474f8cff21c8dbc7 author Mario Heiderich 1570626628 +0200 committer Mario Heiderich 1570626628 +0200 Fixed the tests for some older Edge versions Nxtree 5989406365f47f30d7e05d4056eb0acf583f0bcf parent 19f880e39677daf3ed88e1b4eb4e96857f8a36ff author Mario Heiderich 1570625880 +0200 committer Mario Heiderich 1570625880 +0200 Fixed the tests DĜxtree 40b3f8bf4c105f3e1cc8f96b8e098d8072de8838 parent 6c60e98f57b328688b12c7127ebd539a89de39f3 author Mario Heiderich 1570624605 +0200 committer Mario Heiderich 1570624605 +0200 Enabled encoding attribute for MathML Lbxtree f2f69bc892775cfb99f639d84e5933a33a1155e9 parent 6017a855bef8359cd8002e4cb624da6fb0039562 author Mario Heiderich 1570623625 +0200 committer Mario Heiderich 1570623625 +0200 Added more tests and extended the FORBID_CONTENT tags list RZxtree 0a57d8cf5a0df56f1df115018d3b8bfad4d02816 parent d4de7125953aebef9ad0a4a892678cf5bb7c7f0c author Mario Heiderich 1570622273 +0200 committer Mario Heiderich 1570622273 +0200 Fixed the tests for FF56 who appears to have a sane XML parser лUbxtree 90b577e88ee4312ce5f78f1f221315b68d11c5f1 parent 948034a32ee6c3621bd78b4cdb6891d49af1d4bc author Mario Heiderich 1570620907 +0200 committer Mario Heiderich 1570620907 +0200 Modified the check for "breaker tags" slightly, removed cruft eTxBtree ce0fb3b17d0611efd6b7f247a07bbbcf4f0535d1 parent 9b0fb71b35861fd8abdfd38aa5ff9dfd80d0e993 author Mario Heiderich 1570620270 +0200 committer Mario Heiderich 1570620270 +0200 Attempting to fix the SVG/Math mXSS bug differently Attempting to detect "breaker elements" inside SVG/Math +Wfxtree 962a99d4241aa5d95000fe45531ee5bd22db1bd2 parent b770e4ea81ab538a0dec67c00c938f19bc64856b author Mario Heiderich 1570523682 +0200 committer Mario Heiderich 1570523682 +0200 Finalizing 2.0.5 release M\G#xtree 6f6d5eb09efb53021020679841bc6356a46632d4 parent 35c791791b9ae5651f1970da7fe60d3993dbcdab author Mario Heiderich 1570457912 +0200 committer Mario Heiderich 1570457912 +0200 Preparing 2.0.5 release xFxtree 6b12c6227132d21f6baf5debf698e43bcd4fed4e parent 560bdf43963c381c33e3f8fd1e31878dd356e15b author Mario Heiderich 1570457156 +0200 committer Mario Heiderich 1570457156 +0200 Removed inline comment 0Hx tree 0c842a2f8580b346a773a09128b4ee245842c73f parent db1c5765d4d5d887269d8ddf0a7b83962cc27d6f author Mario Heiderich 1570456802 +0200 committer Mario Heiderich 1570456802 +0200 Added comment to describe what changed test is for 2Pxtree 6b12c6227132d21f6baf5debf698e43bcd4fed4e parent 68020182f22b17f2518b0bd9a3a0921c1cf194a2 author Mario Heiderich 1570456558 +0200 committer Mario Heiderich 1570456558 +0200 Corrected a broken test SGxtree 1cad7955d9f90cba32cf9ebb3450079fce91cb1e parent ffaa4193420db8821d85a8f527f8c103dbba84a9 author Mario Heiderich 1570456453 +0200 committer Mario Heiderich 1570456453 +0200 Fixed a bug in the SVG content check {LFxtree 1c5d1b8d1f84b107b6c0153f726c9cc8a3593467 parent d1a52378be3f0913ba53f2958fbf9b59320bc658 author Dr.-Ing. Mario Heiderich 1570454412 +0200 committer Dr.-Ing. Mario Heiderich 1570454412 +0200 Preparing 2.0.4 release Kxtree e70a35fa5708253ce083f890156f92d3c378d65d parent 8ece51b050dccbeff7e68625adad120d5c5f2a89 author Dr.-Ing. Mario Heiderich 1570364850 +0200 committer Dr.-Ing. Mario Heiderich 1570364850 +0200 Fixed more tests J^xtree a9d25b9cecbf6ce2aa4fa8b804528d812f783424 parent 630226e17f35d50f57d90c0b3f760bda0fec7c7b author Dr.-Ing. Mario Heiderich 1570364395 +0200 committer Dr.-Ing. Mario Heiderich 1570364395 +0200 Fixed two tests J.xtree 61abc88ae184d73daa880d30944d1859aa326143 parent 4209e20a6a8d8ea47565a3dff20ae71e4d710318 author Dr.-Ing. Mario Heiderich 1570363779 +0200 committer Dr.-Ing. Mario Heiderich 1570363779 +0200 Attempting a less error prone mXSS detection Sxtree 95d72a36db68e35a8e70592ba20ad45c879a48b2 parent 955a53eb38fb6ec70f23bbf223ae06d25ca8d292 author Mario Heiderich 1570189223 +0200 committer Mario Heiderich 1570189223 +0200 Fixed an uncaught exception via clobbering found by Masato Kinugawa LX xtree 193f6c6781c5428a662dcce72272b9a8cf877f2f parent 4254f33e094c4f7f5fdb583b8ca9c825dfe86047 author Mario Heiderich 1569919467 +0200 committer Mario Heiderich 1569919467 +0200 Fixed a typo Cextree 15b34854cfa08c2f9d9b8137d1253f657686974d parent cd4403870669e7f1498f26deca76728426a77f13 author Mario Heiderich 1569916858 +0200 committer Mario Heiderich 1569916858 +0200 See #369 Fixed tests for Safari 8 sHKxtree c9fec5f1da5bad7c38b3d6d6f870c78f9ace3a48 parent 44a2a9a40fd520ee88ea1a13bcf9555d5c535918 author Mario Heiderich 1569909988 +0200 committer Mario Heiderich 1569909988 +0200 See #369 Added a test for the less agressive mXSS cleaner Sxtree 29402bb5f8815caaf0e29b642925de3a5260ecca parent 287073ebf134d7fa0a8a55aeec253180573590c2 author Mario Heiderich 1569868183 +0200 committer Mario Heiderich 1569868183 +0200 See #369 Changed SVG / MathML check `I>xtree 9c9b457089abd220f61ccd87551299ad2eb9620f parent 3b0b814f097a2b5777846d2101420e7062e28b3f author Mario Heiderich 1569865483 +0200 committer Mario Heiderich 1569865483 +0200 See #369 Attempt to make the mXSS fix be less agressive ԖPxtree 5374eac083cc87c7638ad430717a09a9a844e943 parent 5745df4dd7593764aae6d714db28714e48cdb4fb author Dr.-Ing. Mario Heiderich 1569687284 +0200 committer Dr.-Ing. Mario Heiderich 1569687284 +0200 Fixed a bug in the test expectations file GRxVtree 0c2c764851627d495fd3aa7284206a3f86e1c24d parent cdc8848ff6c37a08d720dc51c2ba22811458be22 parent 00c8dc3d7bb949963ffb823942647a434566d459 author Cure53 1569515619 +0200 committer GitHub 1569515619 +0200 Merge pull request #368 from jorangreef/test-match Use RegExp.test() instead of String.match()5gKx)tree 0c2c764851627d495fd3aa7284206a3f86e1c24d parent cdc8848ff6c37a08d720dc51c2ba22811458be22 author Joran Dirk Greef 1569499285 +0200 committer Joran Dirk Greef 1569499285 +0200 Use RegExp.test() instead of String.match() RegExp.test() returns a boolean whereas String.match() returns an array of match results, requiring object allocation and adding GC pressure. If match results are not needed then RegExp.test() is faster. #晁xtree a6737d2766b0706dca9b1474d18bb4a8ab00d661 parent 7dda7cdee56a8015d91327123730f179456df09c author Dr.-Ing. Mario Heiderich 1569413045 +0200 committer Dr.-Ing. Mario Heiderich 1569413045 +0200 Fixed Tests for Chrome 22 Kѕx tree 6d83a2438a966d6dddd0ee6bd8b2232e0ec61f61 parent 3bc896ac5a98b0018e44eb0f7d936884103061e7 author Dr.-Ing. Mario Heiderich 1569412671 +0200 committer Dr.-Ing. Mario Heiderich 1569412671 +0200 Fixed a typo Hxtree 24bf1781bbd01feec4de8a0627d99d97bb10eeed parent 9dbe46153bfdc0914a9bc58f1ba78a7b23ab25c4 author Dr.-Ing. Mario Heiderich 1569412536 +0200 committer Dr.-Ing. Mario Heiderich 1569412536 +0200 Adjusted some more tests for Safari 8 and MSIE10 EUx tree 80291341377251f9c8837d534126edac2dc83596 parent 682d4931e06f911ea16b1e509c06a6802e32d7e0 author Dr.-Ing. Mario Heiderich 1569410530 +0200 committer Dr.-Ing. Mario Heiderich 1569410530 +0200 Adjusted more tests for Safari 8 7Mx.tree d96582d28fe40d61cf6078e9a2517952e9494fb3 parent 4003fb990d7b0bec09ee7de545df2ed9827ed391 author Dr.-Ing. Mario Heiderich 1569410081 +0200 committer Dr.-Ing. Mario Heiderich 1569410081 +0200 Adjusted the tests to reflect the new "no SVG for Safari 8" situation 7\xtree 6790ba24eac09f01b4c8931b85fc8bc7457588ab parent a37147ccd940b78a481d235481d3162d2541ee75 author Dr.-Ing. Mario Heiderich 1569408201 +0200 committer Dr.-Ing. Mario Heiderich 1569408201 +0200 Trying to target Safari 8 in yet a different way ITCxtree 05a03edd9916c837c900fa1d8c33a69c053ccab6 parent 1c1a6fe7b8ab4aca5eaa8f842fa15606092e4f09 author Dr.-Ing. Mario Heiderich 1569405474 +0200 committer Dr.-Ing. Mario Heiderich 1569405474 +0200 Cahned Safari 8 XSS fix again to be more accurate Upxtree 74d0a4408b2e2a74f7b9c4f10f51588b28009fe5 parent b6949e9706be352ca32edad4f2a769520c2a9236 author Dr.-Ing. Mario Heiderich 1569404481 +0200 committer Dr.-Ing. Mario Heiderich 1569404481 +0200 Used instanceof instead of typeof, duh 3*Qtxtree 094de977aa08254a9dbd18ed561d47963fb81c5a parent 8ba4a18511f9ca6a2c1dbb6cb8955bedc8f148b2 author Dr.-Ing. Mario Heiderich 1569402132 +0200 committer Dr.-Ing. Mario Heiderich 1569402132 +0200 Made the Safari 8 XSS fix be more accurate ciRxtree 61a83a121f98a5e113dd20ba2a239e606ed9f36a parent c31ea43b1e5e95f8f1f287542f1b2041a22604c9 author Dr.-Ing. Mario Heiderich 1569396403 +0200 committer Dr.-Ing. Mario Heiderich 1569396403 +0200 Made the Safari 8 check be more accurate ѮQTxtree e138614a0ae88758a7b65fc6c3e1624edfbf0a3f parent cc2750152a57c62143a85c87220b04f425192b60 author Dr.-Ing. Mario Heiderich 1569396214 +0200 committer Dr.-Ing. Mario Heiderich 1569396214 +0200 Added a fix for a Safari 8 related behavior UQx tree 8f5123ac2109cd66cc11bddcf3f85a5a0e56a9d9 parent bdc6d049292bf4a5581ea6e5dcba61d24b48f143 author Dr.-Ing. Mario Heiderich 1569394850 +0200 committer Dr.-Ing. Mario Heiderich 1569394850 +0200 Fixed a typo wI2xtree fe556955e21a15f1ccdcc2a4f440066403a2d8de parent 4f6ed39f605f1a7cbb90e8bb0b13c370ee1aa7bf author Dr.-Ing. Mario Heiderich 1569393348 +0200 committer Dr.-Ing. Mario Heiderich 1569393348 +0200 Fixed the tests YMJxtree 065742f0b1e8064f61284c7e805feda2b4b452c1 parent cfc956ffbafe18e38f49f1c978a60e16079bdfd0 author Dr.-Ing. Mario Heiderich 1569392113 +0200 committer Dr.-Ing. Mario Heiderich 1569392113 +0200 Preparing 2.0.3 release . L xMtree da347c04ec279485a5bc186804068de036cb2309 parent c99b5091bf75eab6d09e43f6125479dbf49c2c57 parent 6d5ddf9c6a7d8cead4e8dd4bca25cda1f2149243 author Dr.-Ing. Mario Heiderich 1569330066 +0200 committer Dr.-Ing. Mario Heiderich 1569330066 +0200 Merge branch 'master' of github.com:cure53/DOMPurify "Fdxtree 80529bbfac9f7373d1c200ef34fb85d84f3590aa parent 91f9884a6a84085f0bcec2a55b4f0f9621bcb839 author Mario Heiderich 1569325485 +0200 committer Mario Heiderich 1569325485 +0200 Fixed a typo ,.Cx tree 7a1aea8e9d6d9aea2598248fbac8b942f42d93ac parent 040fd1ad9c2dcd2df6a517d66bedd8a59c467e1d author Mario Heiderich 1569325445 +0200 committer Mario Heiderich 1569325445 +0200 See #366 Fixed the BS tests _Ixtree 866d6fe9b077e43bad3f086eceb39d8ceec1a9a9 parent 735c48b119037a9c9d00fa757f81f3f5bae3b672 author Mario Heiderich 1569324262 +0200 committer Mario Heiderich 1569324262 +0200 See #366 Added test case "GCxtree 8d98b0c19b0f5635f1e6ee2172b5ae8e8db5b598 parent 993a7c44f9bd07ee5cab2444daa655395149618f author Mario Heiderich 1569324103 +0200 committer Mario Heiderich 1569324103 +0200 See #366 Attempting a first fix for the config override problem cUJxtree 8f9febbe3df3768f14c1f4755fe23947047e18b3 parent 3bc2299016fbdec82d4df10e8ca3a02a91c6686f author Dr.-Ing. Mario Heiderich 1569309144 +0200 committer Dr.-Ing. Mario Heiderich 1569309144 +0200 Fixed a MathML related bypass using templates QTxtree abb905d4d67b22baa2d79868456d63822a967117 parent 54e61a9884d6adb36572358750c8a3df790a7bc6 author Dr.-Ing. Mario Heiderich 1569264032 +0200 committer Dr.-Ing. Mario Heiderich 1569264032 +0200 Added better check for templates inside SVG ORxtree fa414b9a35d8b489de2a182f6184b1ed25d1cdae parent 75b33c92a18979c70035e2cdced355ba4d5e2cfc author Dr.-Ing. Mario Heiderich 1569262635 +0200 committer Dr.-Ing. Mario Heiderich 1569262635 +0200 Attemting to detect templates inside SVG Sxtree c148001ab2b1aa9a6a4f3b78e0ee7ae895a98383 parent 993a7c44f9bd07ee5cab2444daa655395149618f author Dr.-Ing. Mario Heiderich 1569261554 +0200 committer Dr.-Ing. Mario Heiderich 1569261554 +0200 Addressed yet another mXSS pattern in Chrome 77 TTx tree f5019b4f891237390af50dae9feb6896c2aa36cd parent 596242dd3122b973d1f353125d126d74854f65ec author Mario Heiderich 1569220924 +0200 committer Mario Heiderich 1569220924 +0200 Preparing 2.0.2 release Modified credits in README hdNxtree f6a5010e6f740239103b72828339740296b6ab99 parent ee4822d2e41d769d1868a008fce8d26ae5314e82 author Mario Heiderich 1569220165 +0200 committer Mario Heiderich 1569220165 +0200 Fixed an mXSS test uZCxtree ff7d975fffa0f8e33d371e4f7986bc5f83027bca parent 5b5a619e00d81ca8f2f1a231e49bdb124229288d author Mario Heiderich 1569219788 +0200 committer Mario Heiderich 1569219788 +0200 Added tests to cover new mXSS findings |MCx tree 58b67bde340aa25e2ad868b6b7e0ca50f0f0f21c parent 04eb8e41845da4218aa31d0cfeb46bddbfbfa1ee author Mario Heiderich 1569062683 +0200 committer Mario Heiderich 1569062683 +0200 Attempted a less aggressive fix for the mXSS problems oCT8x#tree 84f6eb85d85d97431ba528c50dfb86afab40bbc8 parent 53259858bcf0208a240202aad90777feac284037 author Mario Heiderich 1568965948 +0200 committer Mario Heiderich 1568965948 +0200 Re-added mXSS check for Edge because apparently it also affected E15 and E17 Xx+tree 4591298beee3c2e0326bdef4292a6056214bb9f4 parent 646730ea15d78d83158d7a62a6ad7b3afe2f7b29 author Mario Heiderich 1568965762 +0200 committer Mario Heiderich 1568965762 +0200 Updated some inline comments to be accurate again Supressed a useless linter warning 7^>xtree 3a41bf9a8c09afc66819a66c5ebe03887da78658 parent 3d869c7a71f560f4b99a96dd6b3f2861542d4aa7 author Mario Heiderich 1568963681 +0200 committer Mario Heiderich 1568963681 +0200 See #365 Re-added colgroup and thead to no-content tags 6Qސxtree 264193715f1fd178e1a417fb8eaa440c40d1730b parent 04194a2d72ea7f5a048028e51bebee6f3edd5277 author Mario Heiderich 1568963511 +0200 committer Mario Heiderich 1568963511 +0200 Removed some code for deprecated Edge tech preview builds uSęx)tree 38b421ef5f54e65519cc6a14e5d68c35f76b6dfd parent 85d5b0dadfe107f26ce2f852171519b708ed9801 author Mario Heiderich 1568961897 +0200 committer Mario Heiderich 1568961897 +0200 See #365 Made sure forbidden tbdoy gets readded when tables are used to avoid DoS [Hxtree 3e7bfbd774dd0a16619dd9cd79f161611f698cdf parent a378ddfb4446a5422eca1e53b32419ff94eb7c38 author Mario Heiderich 1568961845 +0200 committer Mario Heiderich 1568961845 +0200 See #365 Removed tbody from no-content tags 8Nxtree 5996e4cae2b9a16adfce937b7df35c4ae43aab87 parent 966ab9143233da23604a477799a0ef58ae2ebfec author Mario Heiderich 1568961033 +0200 committer Mario Heiderich 1568961033 +0200 See #365 Added tbody, thead, colgroup to non-content tags to avoid DoS Wٕxtree 8f8316cf473a0a25da943812c1a6c9d0b61f32a0 parent d57be7b686ad72f1ac85d2bde20e5a398b41b6fa author Mario Heiderich 1568884157 +0200 committer Mario Heiderich 1568884157 +0200 Fixed two more CI tests Prepared 2.0.1 release Ox tree 7d14b1b481a66b538266535dacdf67fc1278c4a5 parent bf3a29151d8984d125e091ce0f1b6b8aa6ad757a author Mario Heiderich 1568883491 +0200 committer Mario Heiderich 1568883491 +0200 Fixed first broken CI tests Hӝxtree 3da7d1f2a8a982c26e9f3b0654577dbd15b8751a parent f8b51631266decc66a4db4d25422d35a5016a5c4 author Mario Heiderich 1568880923 +0200 committer Mario Heiderich 1568880923 +0200 Fixed the Chrome tests Fxtree 54edad2c271c2ef48f785e2445c9c2443a720cc1 parent 2cb8b5b6021f14f7ea282c347c0391259ba83bff author Mario Heiderich 1568880318 +0200 committer Mario Heiderich 1568880318 +0200 Hopefully fixed the final broken test Lۖxtree 3284dba21e6c149011b70710253fa329bb2433d5 parent dfc7fc24d14409396448bfa5156ef554e037ae32 author Mario Heiderich 1568880123 +0200 committer Mario Heiderich 1568880123 +0200 Adjusted the test expectation to cover more agressive scrubbing uUxtree 642cc96c44aff33366a23155e79e74869af369ee parent f57c621657a586cf097b568f1810e8c0da7e813e author Mario Heiderich 1568879762 +0200 committer Mario Heiderich 1568879762 +0200 Added _forceRemove instead of Node.remove() vMxtree d67d9c305a47e91e52e9035eb1b66e50cb576455 parent 2355b2148c01c529aaf0684c3c051d1630a9f376 author Mario Heiderich 1568879306 +0200 committer Mario Heiderich 1568879306 +0200 Added better checks for SVG mXSS Hxtree 1a18bde93ba24039ddb5aec52d25e2ca83bbcab8 parent 135745253e601c69661046c5e78051e668f60176 author Mario Heiderich 1568878701 +0200 committer Mario Heiderich 1568878701 +0200 Removed the overly specific namespace check to fix the Chrome mXSS $Vwxtree f75f6c4a70c93de58916e6142dca8bbf27b80dbf parent c06f51277009719250f86c213e13afd30aefb6cb author Mario Heiderich 1568877764 +0200 committer Mario Heiderich 1568877764 +0200 Added a discrete test case for the Chrome mXSS Oxtree 4ab350362eeb101468aeeb0266a9ba194428691d parent c3e37aeb7f4cfecf1ddffd2dbafb3659b8a4f38d author Mario Heiderich 1568876676 +0200 committer Mario Heiderich 1568876676 +0200 Adjusted one test case to match the new behavior yR#xtree 05b1a1bcfd7f3575b76af5fe4abef4c229be7c95 parent cdfe966742bed71aada60b64d80c9016dcaabddc author Mario Heiderich 1568876480 +0200 committer Mario Heiderich 1568876480 +0200 Attempted to fix another Chrome mXSS, spotted by Michał Bentkowski Z6xtree c2f4389af288860c46d401e1e32013c6e8c0280a parent 7d9f9fd6f95c7f289515c8c42335d019101d9ba7 author Mario Heiderich 1568643671 +0200 committer Mario Heiderich 1568643671 +0200 Updated dependencies ExOtree 2c89d2d51a8ebcc66ccefa893c7bc90afcb605fd parent 6550a62370be30b0294e36537018d540436674a9 parent 720dde4c65c23912aa4366d0621cd1bbfc029aaa author Cure53 1568322341 +0200 committer GitHub 1568322341 +0200 Merge pull request #363 from camerondunford/patch-1 Fix `RETURN_TRUSTED_TYPE` in READMErd~xKtree 2c89d2d51a8ebcc66ccefa893c7bc90afcb605fd parent 6550a62370be30b0294e36537018d540436674a9 author Cameron Dunford 1568316611 -0700 committer GitHub 1568316611 -0700 Fix `RETURN_TRUSTED_TYPE` in README Update documentation to use singular, matching implementation.ej%xtree 8b40a0c33bdf45b0c3ffed31f7d6b4df52c1648a parent 4090fe4213386dc3fb54bdf350de64996c1f31f4 author Mario Heiderich 1568306158 +0200 committer Mario Heiderich 1568306158 +0200 Preparing 2.0.0 release n G'xtree 631133275591baeff0af77787df1eca74ed1a971 parent c4b1fb132e4824a01f13d7cd00c8ca91c8411dce author Mario Heiderich 1568305759 +0200 committer Mario Heiderich 1568305759 +0200 See #361 Removed Chrome 77 again, not supoorted by BS yet }Rx#tree 2c98531a8d1226b1d3eaed0b83e2a360bfdda8f3 parent f97fc55bb7b774cf36591a33a0ffbd12d43b92b0 author Mario Heiderich 1568304431 +0200 committer Mario Heiderich 1568304431 +0200 See #361 Tweaked the test suite runner to make sure we get correct results. AZ>xtree d05a34673fd991397e304f7fe6bdc9f57713164e parent b71b03e2cdacea2232c9c058dcb1b97b22c8f515 author Mario Heiderich 1568303787 +0200 committer Mario Heiderich 1568303787 +0200 See #361 Finalized first new version with Trusted Types switch <Upxtree eda41e381351cd8420543453de976e2481bcac25 parent e0fac3c736ca655c0c6e8bd035526815182341c7 author Mario Heiderich 1568302560 +0200 committer Mario Heiderich 1568302560 +0200 See #361 Made some minimal README changes K2xtree c11c41d630621a7916035ed4e723a6456c38634d parent 6a8151445a8488846fe306e6b240b707c82f41c9 author Mario Heiderich 1568302167 +0200 committer Mario Heiderich 1568302167 +0200 See #361 Changed README to reflect on the changes with Trusted Types Txtree 91a86f11cd542ad67e7fcf71c69d8bfb36615e12 parent 16582d02b26925914b7bf053a7c4b45f06c942e4 author Mario Heiderich 1568301315 +0200 committer Mario Heiderich 1568301315 +0200 See #361 Adjusted the tests slightly to match Chrome >77 as well CTxtree 5166d45c464d4c244476693d9bb638682e92cc6b parent f51e0d8a3b71c964b1af42d5f39d1e18a2315b1f author Mario Heiderich 1568300284 +0200 committer Mario Heiderich 1568300284 +0200 See #361 Added simple tests for new return type HNxtree 3b6d561c6bd4061d8ecf22c3f2ad1bfdf5268e22 parent 85d2aef641ce9cb18cd70cb4f8a1500dc66aa177 author Mario Heiderich 1568299400 +0200 committer Mario Heiderich 1568299400 +0200 See #361 Added first logic to enable RETURN_TRUSTED_TYPE config flag VUxtree bd40164fd2d0bdf7da55d2c82b6998cf7cb9b828 parent 86dc2b5a0911426ebbc356571d2e08c2341f218a author Mario Heiderich 1568210539 +0200 committer Mario Heiderich 1568210539 +0200 Set tested browsers to 26 in README =J˒xtree aae596c9f9c4aeb5709cef7d9e7cd2d6eac35c15 parent dd822a831469f065614e51e7782803256f869a67 author Mario Heiderich 1568210477 +0200 committer Mario Heiderich 1568210477 +0200 See #361 Added Chrome 77 to tested browses ؿLxtree 4a09e6af94dbd613fab8cbf0a3e619e9d2a48e33 parent e18e50dd1315cb6acf14febd3757d4d37e855da6 author Mario Heiderich 1568209198 +0200 committer Mario Heiderich 1568209198 +0200 See #361 Added clear documentation about the C77 Trysuted Types issue :XY x&tree 9119b3198ae09639ea73c8b6f5b7fe3fcb337098 parent 06f24c0187f2962d119ec94c9ef34310f54a9d99 author Cure53 1567673354 +0200 committer GitHub 1567673354 +0200 Update FUNDING.yml?4xMtree 9119b3198ae09639ea73c8b6f5b7fe3fcb337098 parent 9a8513e1d8100ad460155c264c5976ef0f4d229a parent 60562cab87bb1d610cf8f1f9419c7e78f39ecbcc author Dr.-Ing. Mario Heiderich 1567448083 +0200 committer Dr.-Ing. Mario Heiderich 1567448083 +0200 Merge branch 'master' of github.com:cure53/DOMPurify xc۔xtree 40c6cb2e33b882250786aea6d1a59bf10d573e76 parent 6b09e517c8767e73b0809ac9c65a41a7c07fd9c5 author Dr.-Ing. Mario Heiderich 1567447988 +0200 committer Dr.-Ing. Mario Heiderich 1567447988 +0200 See #360 Added FUNDING.yml K<xltree cba6dcce997c2cb05b2bbd8c38f1df249289904f parent 1d960733e006dca48a22a8593ee16d5f0a6b4c92 parent 69b5768e4564b5edb55f6c4f4b45fac8c6a34962 author Cure53 1567442017 +0545 committer GitHub 1567442017 +0545 Merge pull request #358 from cure53/dependabot/npm_and_yarn/eslint-utils-1.4.2 Bump eslint-utils from 1.3.1 to 1.4.2oKxhtree 255aea45f7dcfb9e5e62ad4196d3e5f18ed568e0 parent 6b09e517c8767e73b0809ac9c65a41a7c07fd9c5 parent d9cbe56d78f052d928685f2ec4bf233ea9f0cee2 author Cure53 1567442005 +0545 committer GitHub 1567442005 +0545 Merge pull request #359 from cure53/dependabot/npm_and_yarn/mixin-deep-1.3.2 Bump mixin-deep from 1.3.1 to 1.3.2.Fm—#x7tree 255aea45f7dcfb9e5e62ad4196d3e5f18ed568e0 parent 6b09e517c8767e73b0809ac9c65a41a7c07fd9c5 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1566929613 +0000 committer GitHub 1566929613 +0000 Bump mixin-deep from 1.3.1 to 1.3.2 Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. - [Release notes](https://github.com/jonschlinkert/mixin-deep/releases) - [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2) Signed-off-by: dependabot[bot] |@#x:tree 571e162b37368922834c5baa226f8b78a6f25915 parent 6b09e517c8767e73b0809ac9c65a41a7c07fd9c5 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1566847655 +0000 committer GitHub 1566847655 +0000 Bump eslint-utils from 1.3.1 to 1.4.2 Bumps [eslint-utils](https://github.com/mysticatea/eslint-utils) from 1.3.1 to 1.4.2. - [Release notes](https://github.com/mysticatea/eslint-utils/releases) - [Commits](https://github.com/mysticatea/eslint-utils/compare/v1.3.1...v1.4.2) Signed-off-by: dependabot[bot] FfƑxtree 3585d7198d74cb28e0500717cb643bdcd2abb45f parent eb9e1b752e92023ed141dcb14777819f6c6adac1 author Mario Heiderich 1566642185 +0200 committer Mario Heiderich 1566642185 +0200 Fix #357 Added minlength to allowed attrs pMDx`tree 6d53cfe60049af458d82aff0a9143f68e2b4b189 parent a9cfc41e4b773f807ee6fec84959b6f4dcf9a74c parent c7b098e157308e4e31ef5879480ea31850dbae17 author Cure53 1562926343 -0700 committer GitHub 1562926343 -0700 Merge pull request #349 from cure53/dependabot/npm_and_yarn/extend-3.0.2 Bump extend from 3.0.1 to 3.0.26jf'xutree 99ec25b558ac27174e872c490d8743aa6da5f084 parent 53c3206b6fcceb0e085f9b48a056f5220ed4095e author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1562926189 +0000 committer GitHub 1562926189 +0000 Bump extend from 3.0.1 to 3.0.2 Bumps [extend](https://github.com/justmoon/node-extend) from 3.0.1 to 3.0.2. - [Release notes](https://github.com/justmoon/node-extend/releases) - [Changelog](https://github.com/justmoon/node-extend/blob/master/CHANGELOG.md) - [Commits](https://github.com/justmoon/node-extend/compare/v3.0.1...v3.0.2) Signed-off-by: dependabot[bot] ߜxltree 9bca0225a8414fe8b73560f9555690327d9afc7a parent 47fd50dd93f23c5310dab539f27c4208dd40bc51 parent 49930a44314821ca9938248ce4af48a643237ec1 author Cure53 1562926153 -0700 committer GitHub 1562926153 -0700 Merge pull request #350 from cure53/dependabot/npm_and_yarn/tough-cookie-2.3.4 Bump tough-cookie from 2.3.2 to 2.3.4Nm xltree e664d0356e81ec23a2e1c768da56206389c21c67 parent 129a904e07970d6808dbc35d705f19fda79d2afa parent a7c61b4a7d304144a58103360d0bd4be3a093c97 author Cure53 1562926142 -0700 committer GitHub 1562926142 -0700 Merge pull request #347 from cure53/dependabot/npm_and_yarn/stringstream-0.0.6 Bump stringstream from 0.0.5 to 0.0.6nxetree 394ce54f415b8928c438f5f73636671b8e14717e parent 53c3206b6fcceb0e085f9b48a056f5220ed4095e parent 360959c60802e4081288a8deefa49bb15cc82f45 author Cure53 1562926135 -0700 committer GitHub 1562926135 -0700 Merge pull request #348 from cure53/dependabot/npm_and_yarn/fstream-1.0.12 Bump fstream from 1.0.11 to 1.0.12(Rixatree 28c1f9da06b26b55d8bae11b27d8356966d38331 parent 979ccedb0d497e3648f8f3503b1535494465ab28 parent f74a8c681fc359864758f5f3d0efd6f49a9a7291 author Cure53 1562926106 -0700 committer GitHub 1562926106 -0700 Merge pull request #351 from cure53/dependabot/npm_and_yarn/sshpk-1.16.1 Bump sshpk from 1.13.1 to 1.16.1h"x tree 28c1f9da06b26b55d8bae11b27d8356966d38331 parent 979ccedb0d497e3648f8f3503b1535494465ab28 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1562922930 +0000 committer GitHub 1562922930 +0000 Bump sshpk from 1.13.1 to 1.16.1 Bumps [sshpk](https://github.com/joyent/node-sshpk) from 1.13.1 to 1.16.1. - [Release notes](https://github.com/joyent/node-sshpk/releases) - [Commits](https://github.com/joyent/node-sshpk/compare/v1.13.1...v1.16.1) Signed-off-by: dependabot[bot] |՚#x:tree 66bd05823481392f27c3a492127617e47fec527e parent 979ccedb0d497e3648f8f3503b1535494465ab28 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1562922928 +0000 committer GitHub 1562922928 +0000 Bump tough-cookie from 2.3.2 to 2.3.4 Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) from 2.3.2 to 2.3.4. - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Commits](https://github.com/salesforce/tough-cookie/compare/v2.3.2...v2.3.4) Signed-off-by: dependabot[bot] !xtree 20b0e97d650e058f41864036bdf7a2afaf33ba22 parent 979ccedb0d497e3648f8f3503b1535494465ab28 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1562922894 +0000 committer GitHub 1562922894 +0000 Bump fstream from 1.0.11 to 1.0.12 Bumps [fstream](https://github.com/npm/fstream) from 1.0.11 to 1.0.12. - [Release notes](https://github.com/npm/fstream/releases) - [Commits](https://github.com/npm/fstream/compare/v1.0.11...v1.0.12) Signed-off-by: dependabot[bot] "x+tree abb230de0252bfc6f5db132ed4d7947a1c326c0a parent 979ccedb0d497e3648f8f3503b1535494465ab28 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1562922883 +0000 committer GitHub 1562922883 +0000 Bump stringstream from 0.0.5 to 0.0.6 Bumps [stringstream](https://github.com/mhart/StringStream) from 0.0.5 to 0.0.6. - [Release notes](https://github.com/mhart/StringStream/releases) - [Commits](https://github.com/mhart/StringStream/compare/v0.0.5...v0.0.6) Signed-off-by: dependabot[bot] \xetree 9a95a9178848e60bc765a6f03029d018cd698be6 parent 1178ff2453e318e517538f4a77915c3785778e5b parent d8a8014779ae5f4628783c732a1c4db0e2edd893 author Cure53 1562922501 -0700 committer GitHub 1562922501 -0700 Merge pull request #346 from cure53/dependabot/npm_and_yarn/lodash-4.17.14 Bump lodash from 4.17.4 to 4.17.14i!xtree 9a95a9178848e60bc765a6f03029d018cd698be6 parent 1178ff2453e318e517538f4a77915c3785778e5b author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1562922022 +0000 committer GitHub 1562922022 +0000 Bump lodash from 4.17.4 to 4.17.14 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.4 to 4.17.14. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.4...4.17.14) Signed-off-by: dependabot[bot] ǩǔxttree ed17cc1d3c294c8e71613e14073502f23942e14d parent f2b139c4ceb3cdd1b5341e7f21ef3ac2b1608140 parent 9e82dfc2b4daed319520ec49d48dd02e160a724f author Cure53 1562921038 -0700 committer GitHub 1562921038 -0700 Merge pull request #345 from cure53/dependabot/npm_and_yarn/lodash.mergewith-4.6.2 Bump lodash.mergewith from 4.6.1 to 4.6.2N&q!xtree ed17cc1d3c294c8e71613e14073502f23942e14d parent f2b139c4ceb3cdd1b5341e7f21ef3ac2b1608140 author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1562884986 +0000 committer GitHub 1562884986 +0000 Bump lodash.mergewith from 4.6.1 to 4.6.2 Bumps [lodash.mergewith](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/commits) Signed-off-by: dependabot[bot] x tree 3b7e75800a8cb23456e99f8c8aa40c90c765c44f parent 503d7d24df61e34b16dad31ab74e08408bb58f14 author Dr.-Ing. Mario Heiderich 1562445008 +0200 committer Dr.-Ing. Mario Heiderich 1562445008 +0200 See #343 Replaced style with textarea in FF mXSS check /Uɖxtree 38bba2d867c5ffd0d713bf2af21d81f0c804d391 parent df1c9978fd20f1bb3be260cfdaab18ce0dbc5c72 author Mario Heiderich 1562168524 +0200 committer Mario Heiderich 1562168524 +0200 Fixed the tests YF#xWtree 9adadd67b8c2fb5759bf9dd44f6a4b50879b97b3 parent 65a204eae8fa3e038b04f7f9561780d48d9d22c4 parent add12dfcae3004c88c2f55a1e1290683a463b3ca author Cure53 1562071726 -0700 committer GitHub 1562071726 -0700 Merge pull request #342 from hansottowirtz/svg-image-data-href Add href as a data uri attributecjXxtree 9adadd67b8c2fb5759bf9dd44f6a4b50879b97b3 parent 65a204eae8fa3e038b04f7f9561780d48d9d22c4 author Hans Otto Wirtz 1562069561 +0200 committer Hans Otto Wirtz 1562069561 +0200 Add href as a data uri attribute Rxtree 6e94058c8d8d07eb27ed922d883924c66e62b925 parent 499e617ea5cfa85f8577e4f262650649bdf21a55 author Mario Heiderich 1560864785 +0200 committer Mario Heiderich 1560864785 +0200 Preparing 1.0.11 Release zF x^tree 124e82d3e17c711f4d0a99cc522859b333131f35 parent 67574da39c0d69689912b665ea23471aac47802b parent 1546398a9d4ec4312ca3f7db55ca4a901344952a author Cure53 1557892168 +0200 committer GitHub 1557892168 +0200 Merge pull request #337 from ArtemBernatskyy/patch-1 Fixed security issue in demo (Reverse Tabnabbing)j xtree 124e82d3e17c711f4d0a99cc522859b333131f35 parent 67574da39c0d69689912b665ea23471aac47802b author [Ar][Te]m.[Be][Rn][At]skyy 1557891940 +0300 committer GitHub 1557891940 +0300 Fixed security issue in demo (Reverse Tabnabbing)Vxtree dfbbf03de4d6e6d991600af0ca63b3cb8d72f18c parent 658b4b40fda7219505cc2012b419b3c5b27820fd author Mario Heiderich 1557214935 +0200 committer Mario Heiderich 1557214935 +0200 Fix #336 Added controls attribute to whitelist yOӗxGtree 60e7c0235dd59827a05803f5461495ec625366be parent 751ba6ff6dc01463c33a38eca300c30ab3548f57 parent 4065c6636f59d4be28a100027ad54193dacf2d92 author Cure53 1556394571 +0200 committer GitHub 1556394571 +0200 Merge pull request #335 from ydaniv/patch-1 Added missing SVG filter attributesubx`tree 60e7c0235dd59827a05803f5461495ec625366be parent 751ba6ff6dc01463c33a38eca300c30ab3548f57 author Yehonatan Daniv 1556394417 +0300 committer GitHub 1556394417 +0300 Added missing SVG filter attributes `filterUnits` and `primitiveUnits`. These appear to have been left out without intention. Thanks! ~Y1p x(tree afa1e0864115f419c97c8a9f4a55cd394864cf20 parent 827a4cca2202815bc281055ecd450b0607778a9a author Cure53 1555960503 +0200 committer GitHub 1555960503 +0200 Update README.md>x1tree ec726908a216dcf2aafba7203b82314370f78d55 parent 7497c633ec8aa2ae6ba8ca5ce75b6605b60cfca4 author Dr.-Ing. Mario Heiderich 1555159274 +0200 committer Dr.-Ing. Mario Heiderich 1555159274 +0200 Fix #333 Fixed the weird linter error and re-enabled lint for test runs l]Nxtree 114f368e8081d94a7b6f604eea52e0bfbc34d773 parent 42723503614bfba4b7672e2d271a3f9fea912c8d author Dr.-Ing. Mario Heiderich 1555159137 +0200 committer Dr.-Ing. Mario Heiderich 1555159137 +0200 Likely fixed #333 UI%xtree a8db4088fbcc20a7d994f2831f4d90e5683097d0 parent b7927272cb9f222e60b33df630f2e97d534aba42 author Dr.-Ing. Mario Heiderich 1555156507 +0200 committer Dr.-Ing. Mario Heiderich 1555156507 +0200 Re-added node8 tests ҙJxtree c9a097c7ae5635ab130ed3c82c3429c44760670a parent 05bcdbec8a58b1f92cd668f888c58552496df8d3 author Dr.-Ing. Mario Heiderich 1555154113 +0200 committer Dr.-Ing. Mario Heiderich 1555154113 +0200 Temporaily deactivated linting for builds Sxtree 109f80c4176e9d336408f770ab1e6d74f2de5eb6 parent c511e4e532a7affde7078e5256e9ac4f9d63ca33 author Dr.-Ing. Mario Heiderich 1555152765 +0200 committer Dr.-Ing. Mario Heiderich 1555152765 +0200 Removed node8 tests, added node11 tests Rxtree 7ea80441e4b80f3e2884ee652c4e8bc71d420ad0 parent 46f459cde29a50b8363776a03310a493976e87a0 author Dr.-Ing. Mario Heiderich 1555149113 +0200 committer Dr.-Ing. Mario Heiderich 1555149113 +0200 Added nore removal hook demo ΕM=xtree 9c8bdab21c201cd42af43293060abe57bd01cf63 parent 44d755d7088663e03c8951dfb7fc42f4928ed211 author Mario Heiderich 1554902928 +0200 committer Mario Heiderich 1554902928 +0200 see #331 Attempted to fix demo for TrustedTypes enabled browsers Uxtree 2f4ac5bcffb640c3ca73c079cd152cbab6137212 parent 7006ad905b044236fabbbf1fb6b546b706a8574e author Mario Heiderich 1554273659 +0200 committer Mario Heiderich 1554273659 +0200 Fixed the tests /)Dxtree b69c00f616e30f699f8195a8a5a536ce9c07a0c0 parent 43eb89c025a47ab8f60c6908fb6a111a94f29e3b author Mario Heiderich 1554273449 +0200 committer Mario Heiderich 1554273449 +0200 Attempted to detect jsdom in one test L|xotree 19c48d017413666db2bce811703b6f05859b4474 parent 4475fdd0042ccde928a72a1d2c51bd89f6b2e074 parent 667d923cc7cd23c179dfba175783b8dd894f282c author Cure53 1554272596 +0200 committer GitHub 1554272596 +0200 Merge pull request #329 from alabiaga/input-type-file-keepAttr sanitize input[type=file] if hookEvent.keepAttr is falsekirxtree 19c48d017413666db2bce811703b6f05859b4474 parent 4475fdd0042ccde928a72a1d2c51bd89f6b2e074 author Aaron Labiaga 1554232645 -0400 committer Aaron Labiaga 1554232645 -0400 sanitize input[type=file] if hookEvent.keepAttr is falsewq Vfx9tree d9f7e5353f3b8c22c56d298f76ee8be840d0a076 parent e86df2794aa3a6ed1314e1e24fb6ca0b02ee5f9c parent 330fb832e85ac8483039c5b10b105b9f4d4582e5 author Cure53 1554191806 +0200 committer GitHub 1554191806 +0200 Merge pull request #328 from jameydeorio/patch-1 Update README.mdg]Бxtree d9f7e5353f3b8c22c56d298f76ee8be840d0a076 parent e86df2794aa3a6ed1314e1e24fb6ca0b02ee5f9c author Jamey DeOrio 1554151526 -0700 committer GitHub 1554151526 -0700 Update README.md This line is saying the opposite of what it does]0Txtree b09e669c41a2f56d189c2c8f0219291b96b349df parent 046a5eb69e3ae6976a8ff89dd22a9b9ce2dcd02c author Dr.-Ing. Mario Heiderich 1552752551 +0100 committer Dr.-Ing. Mario Heiderich 1552752551 +0100 See #327 Added test >gJxtree 9e82042bff8cd65d42697ab5fd679ce80de080d3 parent 922ca55ff54860030628a1d7bd29558b5a2ac3b5 author Dr.-Ing. Mario Heiderich 1552752401 +0100 committer Dr.-Ing. Mario Heiderich 1552752401 +0100 see #327 Added default URI safe attribute collection 0Uxtree b3b0fa05900451b13ae039563b8bd96c3ecbfed1 parent 45a422b55b8d73db5b121edc2383d429b21c02e6 author Dr.-Ing. Mario Heiderich 1552751807 +0100 committer Dr.-Ing. Mario Heiderich 1552751807 +0100 See #327 Changed config var assignment slightly Tx-tree 4e455e3973d1b2b73fade1c1d7889f4450d42e7e parent 470fd5254a24200a33645d1399ce2e023dc9376b author Dr.-Ing. Mario Heiderich 1552751581 +0100 committer Dr.-Ing. Mario Heiderich 1552751581 +0100 See #327 Fixed an issue with config parsing for URI-safe attributes Zxtree 74bfa4e55b331f06649a9a5c406284cdf22f680b parent ec9e7813917b56b624949c0241209b81d4739b51 author Dr.-Ing. Mario Heiderich 1551087304 +0530 committer Dr.-Ing. Mario Heiderich 1551087304 +0530 See #322 Fixed an issue with extraneous elements )Sxtree ea15391923349f5652f87e870412ee4fbeca39a6 parent a33dc47ebcdb3a1d187159bf3afd748c5c103e9b author Mario Heiderich 1550590135 +0100 committer Mario Heiderich 1550590135 +0100 Replaced Safari 11 with Safari 12 for BS tests ENxtree 26f0d5ca10cecc1dbeef93a7c40bcc1f75d1109e parent 3d283c94fe0778de695c8905e07066cc94fd61a4 author Mario Heiderich 1550589477 +0100 committer Mario Heiderich 1550589477 +0100 Attempting to fix broken CI (Safari 11.1.2 doesn't respond) Sxtree 3922744dfb823d4ead150eff297bc718702a4445 parent 19f3f56a930f1d913824a2e52d48ae7eac454bf6 author Mario Heiderich 1550582821 +0100 committer Mario Heiderich 1550582821 +0100 Getting ready for 1.0.10 F0x tree 14ab7304944bdc63165bd2f5ac082f4bacd95545 parent c2c463da229a32037887326b975bd21872473ecb author Mario Heiderich 1550508555 +0100 committer Mario Heiderich 1550508555 +0100 Added more test expecations H^xtree 5e3a6562ed2be81f58ebb3e5a9614bfd3cf4c532 parent 03bf3847a331c594d958871f6dfd42cd7a36e6c5 author Mario Heiderich 1550506453 +0100 committer Mario Heiderich 1550506453 +0100 Fixed the tests #Dx tree 2cd700d8972b0c2521bc3020785d17c9c0b2b543 parent 2cf7f489f14125c6cd7b545cdf3ebd026fab07b7 author Mario Heiderich 1550505698 +0100 committer Mario Heiderich 1550505698 +0100 Optimized check for tagName HHx tree f08491c57c79e7fe682591c8536200ec605b32bf parent da93690f06f88e1c5e58ea125afb2d0409047865 author Mario Heiderich 1550505501 +0100 committer Mario Heiderich 1550505501 +0100 Changed the check for tagName qH^x'tree 18ade5b3df2eedcdaa27fd2ee4ae68a8c591e178 parent aa8118ecb6e280f6c0a1a11e4fa34056c84358fa author Mario Heiderich 1550504853 +0100 committer Mario Heiderich 1550504853 +0100 Attempted to fix an XSS when noembed or noscript are whitelisted Added test case -]bxtree 69cea4a6bdb49bc465c125b48388ef4083768e38 parent 64e5448e4ad87b18de814046cb155752815360c1 author Mario Heiderich 1550161594 +0100 committer Mario Heiderich 1550161594 +0100 Fixed a typo Disabled some linter warnings ݟM`x tree b88cfaef9fdd9c4081b22358e676812c31ba5731 parent f6801bfe0bf196a0bf12cb5e66c1e54627fe85a9 author Mario Heiderich 1550161461 +0100 committer Mario Heiderich 1550161461 +0100 Fixed an error caused by following lint suggestions Rx;tree ccffcf4ab7358f956af61333ada0eb2d24cc2625 parent 04e1d75cabb424e8af588a71d537f60884ac95c4 author Mario Heiderich 1550158108 +0100 committer Mario Heiderich 1550158108 +0100 See #321 * added SVG version attribute to whitelist * fixed several linter warnungs because why not *bxtree b4ebcd127e366b973ca8200f8e3a119488f8639e parent 8e918eb6f27dcbd8a1d0f5579b0aa1a5ca6f2242 author Dr.-Ing. Mario Heiderich 1549807819 +0100 committer Dr.-Ing. Mario Heiderich 1549807819 +0100 See below, now removing FF65, it wasn't Chrome 72 Tx8tree 1db0807b581a5467fd8f678dedbc1bbb851835ca parent c26d70e06e82aa8a3ab64446a4374280554ceb47 author Dr.-Ing. Mario Heiderich 1549807034 +0100 committer Dr.-Ing. Mario Heiderich 1549807034 +0100 Possible fix for the broken BS tests Removed Chrome 72 (seems it crashes on BS) s_x)tree 2084579ba67daa5c9e756fcdd7247a25b2600451 parent 7d807313879bd107638011f8afe6fdfe3edb395c author Dr.-Ing. Mario Heiderich 1549806244 +0100 committer Dr.-Ing. Mario Heiderich 1549806244 +0100 See below, experimenting with BS tests, removing latest browsers [xtree ba4ef8645a493368ac948bdb438c807da07a7ae6 parent 9edf580e333bd303fa5db123ee16a53305ac4de3 author Dr.-Ing. Mario Heiderich 1549805635 +0100 committer Dr.-Ing. Mario Heiderich 1549805635 +0100 See below, experimenting with BS tests Ruxtree b942f6763ab1b472c3ef3441e6ddd49d881214d6 parent 33e96ed89ab542eb0539d71ac779b51401d46685 author Dr.-Ing. Mario Heiderich 1549804786 +0100 committer Dr.-Ing. Mario Heiderich 1549804786 +0100 See below, experimenting with BS tests %QMxtree 3176f860f8602b6d7e1d6fb92e3c6e3c43da3053 parent 4b62c7f5bd7b50f52a3ef5ca015a52c89fcca472 author Dr.-Ing. Mario Heiderich 1549804093 +0100 committer Dr.-Ing. Mario Heiderich 1549804093 +0100 Experimenting with BS tests n/Nxtree ae52a72905c7cbe769c161b239fb5484a0db9285 parent 5a058f4f17093bf10ce50c81be370edbfdad40fe author Dr.-Ing. Mario Heiderich 1549803122 +0100 committer Dr.-Ing. Mario Heiderich 1549803122 +0100 See #320 Deactivated BS tests for now JPxtree 4d73845edf104a199f9b79126d6cb7d0b41f24a1 parent e50acad7d4726e1cb1276c3062ab767f42cea02f author Dr.-Ing. Mario Heiderich 1549800861 +0100 committer Dr.-Ing. Mario Heiderich 1549800861 +0100 Added a newline Iex'tree 1206f4c3f0215038ba62648f70c93b014d25839d parent d101d29d30412282c53d324ea6e467978c812f01 author Dr.-Ing. Mario Heiderich 1549799276 +0100 committer Dr.-Ing. Mario Heiderich 1549799276 +0100 Removed test coverage for node6 because karma4 incompatibility YUxtree 816bf0a1c009f4769f8ef6b1066a03d8734ac31b parent f3e8221af0e577183682ca7cae7d992668cfabca author Dr.-Ing. Mario Heiderich 1549798674 +0100 committer Dr.-Ing. Mario Heiderich 1549798674 +0100 Updated dependencies Raised timeouts for karma qUxtree 997e5bc93fefe1f4394b2534b6e67b35f5a20d43 parent 7b660a68643bc8c06ef8ab4bf05b8f31b1f59bda author Mario Heiderich 1549723138 +0100 committer Mario Heiderich 1549723138 +0100 Removed 5 legacy browsers from test suite GNٜx tree 24d37cc5bbc4b3cfa98a3d8d61218fd5df5f10a0 parent 2d00275fe92c49d08d46ddf1e8148471e3fdd347 author Mario Heiderich 1549718016 +0100 committer Mario Heiderich 1549718016 +0100 Added warning about the risky template mode to README R_xtree 21376f0e165484f79f1b5c0942e672165686222f parent 1069c3f4196c72b2fcbc7ab0a24213a306c7f60f author Mario Heiderich 1549716777 +0100 committer Mario Heiderich 1549716777 +0100 Added another test case for expression injections PSxtree bfc0d667bfcb1ed712775f8765246f52304848f6 parent 4b582f81865b24fac250a65a19ec58e422097027 author Mario Heiderich 1549716488 +0100 committer Mario Heiderich 1549716488 +0100 Rolled back regex changes G9x&tree 80ee977b29198dc6820ad290511067871e0da3d5 parent a488ee8e884da8dbc5926c295120e621916a9b74 author Mario Heiderich 1549716241 +0100 committer Mario Heiderich 1549716241 +0100 Chnaged template detection regex Added expression check for final return string [x tree 81dabc110f7e91c7b9505d48eb07854fb7974982 parent bf8f222e16025c58113fda6b00782b27a722fd85 author Mario Heiderich 1549714878 +0100 committer Mario Heiderich 1549714878 +0100 Added more browsers to CI tests Ix;tree 15801145cd0f53fd3dcca1df8761f67c925f8829 parent b3186aff1ce33b52c85337b1df7997387cc946ff parent 47f99c77cff788d49d4c8768bb128b229a5c88ef author Mario Heiderich 1549713226 +0100 committer Mario Heiderich 1549713226 +0100 Merge branch 'master' of github.com:cure53/DOMPurify O_ xtree f941bfcdf601b2677062f610a3b3ade344a1adbe parent af0f95cb48666a959d89634e962eb48ae2d5ce49 author Mario Heiderich 1549712954 +0100 committer Mario Heiderich 1549712954 +0100 Fixed one of the SAFE_FOR_TEMPLATES test cases 5MNؖxVtree 82b0ca709d44f16171915ed93d4be0ec6594f4aa parent a904f6cb7bf10e0107e23fd7a10d06bb8545177a author Mario Heiderich 1549712697 +0100 committer Mario Heiderich 1549712697 +0100 Fixing a problem with expressions in attributes, thanks Masato! Fixing a problem with expressions in text nodes, thanks Masato! Fm× x(tree c5bde21dd347d487c8c3ef141ca64274339811f2 parent 34d2015ade87f0b16c1dab1c75461f0a5413418f author Cure53 1549134204 +0100 committer GitHub 1549134204 +0100 Update README.mdB>T x(tree 0f914f2018b4f05b32ad9106a1109c409c359a0f parent 2fa8b8c0e0286dd0cd5f17f2b4b067f98aad8442 author Cure53 1549127273 +0100 committer GitHub 1549127273 +0100 Update README.md x(tree 797c7dbb1c1b253947a5a8556978ae79a44e04c2 parent 86a175dc3a627bf0ba00d6e62bbfbb86bfc5c3ca author Cure53 1549127231 +0100 committer GitHub 1549127231 +0100 Update README.mdx?x tree 61163b803a33d10c8ed98a35214aa288ddcf99fc parent dead46e98c5b83281677ee569be01eff392a34ed author Dr.-Ing. Mario Heiderich 1547819981 +0100 committer Dr.-Ing. Mario Heiderich 1547819981 +0100 Fixed a typo IHșxYtree 6b98042686c7742a7a0da133d28121c387a3177d parent a904f6cb7bf10e0107e23fd7a10d06bb8545177a parent 648ac99e7c2cdfccc9d3ac7d8ffdb8177e812edc author Cure53 1547627603 +0100 committer GitHub 1547627603 +0100 Merge pull request #315 from choumx/svgfilter-frozen-error Check if array is frozen in addToSet()j{xtree 6b98042686c7742a7a0da133d28121c387a3177d parent a904f6cb7bf10e0107e23fd7a10d06bb8545177a author William Chou 1547587648 -0500 committer William Chou 1547587648 -0500 Check if array is frozen in addToSet() with unit test. bS"xtree 9604e9d6caecf0a9a69238a7192ac2e7ed4ec418 parent 1081f0b42f6c3f77351d0b492cdf2c70153746bc author Mario Heiderich 1547456321 +0100 committer Mario Heiderich 1547456321 +0100 See #313 Getting ready for 1.0.9 Hkxtree 9466e36028cdcf2b75cc3243a0295d18dac5902b parent 42f5138295d77e4f2a5039d89ca6e952716a610b author Mario Heiderich 1547455927 +0100 committer Mario Heiderich 1547455927 +0100 Attempting another fix for build error cLxtree a2bedf9fc72103c1267caafe26771e400d050a71 parent ea895348513939efb8190179bd1d3c899b17cb09 author Mario Heiderich 1547455541 +0100 committer Mario Heiderich 1547455541 +0100 Attempted a fix for the build error ByKXx tree be3f2319bd9a9b0c38e13393e247babc725937a0 parent 443f2f7069375aa747c8cbbd8fe62e01bc661f5a author Mario Heiderich 1546432374 +0100 committer Mario Heiderich 1546432374 +0100 See #312 Removed useless and obtrusive test-alert PxHtree 507057ed5935ef68e69aaeac478c68d73f1c4bcb parent c0ddd65c37b7b55552bc3d49f144d8f43f49e23a parent a7165a1669a29760ac1d1d67c026f6b2df15b456 author Cure53 1541029926 +0100 committer GitHub 1541029926 +0100 Merge pull request #310 from koto/trusted-types Added support for Trusted Types.:^dxtree 507057ed5935ef68e69aaeac478c68d73f1c4bcb parent ac198770ef16eaf9affaa76adc4caab00bf80f3d parent c0ddd65c37b7b55552bc3d49f144d8f43f49e23a author Cure53 1541012911 +0100 committer GitHub 1541012911 +0100 Merge branch 'master' into trusted-typesX2x}tree 927542ea383c8a18422bb893b83e6c7ad3d1edb7 parent b1c31ebcf3411dd482728a341cb4627d29445541 parent 9626a61f30966ae787bb9da371a03bbd0f4a5db8 author Cure53 1541012832 +0100 committer GitHub 1541012832 +0100 Merge pull request #309 from flavorjones/flavorjones-fix-attr-and-tag-typos fix misspellings of some tags and attrs in the allowlistsE5x:xtree 185a7c0a5d33d0e6103a89a6da4b97e487beb623 parent 03ec3c264ebe5d2340b343f3e0ed352d0a12b3f6 author Krzysztof Kotowicz 1541007555 +0100 committer Krzysztof Kotowicz 1541007555 +0100 Made the demo buttons work. MDxtree fcaa7e43083c41e969c40fc35c41eb314a47dd65 parent 24edc76bf3c2700b71a55f6a1430d292c6562a08 author Krzysztof Kotowicz 1541004247 +0100 committer Krzysztof Kotowicz 1541004247 +0100 Deleted the duplicated comment text. P(xytree 1265ee682a0d6c71d9bb24da97eb0425633feb66 parent b1c31ebcf3411dd482728a341cb4627d29445541 author Krzysztof Kotowicz 1541003707 +0100 committer Krzysztof Kotowicz 1541003707 +0100 Added support for Trusted Types. DOMPurify detects if TrustedTypes are available. If so, will create an inner no-op policy, with a name 'dompurify', optionally suffixed with a value specified in a data-tt-policy-suffix attribute of the script using DOMPurify. It will use that policy when interacting with the (dirty) DOM, and will return a TrustedHTML object instead of a string. See https://github.com/WICG/trusted-types. ڊxtree 927542ea383c8a18422bb893b83e6c7ad3d1edb7 parent b1c31ebcf3411dd482728a341cb4627d29445541 author Mike Dalessio 1540747407 -0400 committer Mike Dalessio 1540747407 -0400 fix misspellings of some tags and attrs in the allowlists Y<xtree 281745090d43ea6a762031411c4706f808bef718 parent 3cd313513ef7303f3685b5149bd1b3c97bff7373 author Mario Heiderich 1539242663 +0200 committer Mario Heiderich 1539242663 +0200 Added Chrome 69 to tested browsers Updated Readme KNřxItree 5c87d1b58bdd8661a93634151c8e1ee72e474960 parent 19c789c0d8bc1fb284458eb7ff2f54816cb22efb parent 0c585bf0ce0fae59a1f4364b72ca8218b52b07aa author Cure53 1539242367 +0200 committer GitHub 1539242367 +0200 Merge pull request #306 from tlau88/SquashingPRVMemLeak Squashing PRV Memory Leak?d x%tree 5c87d1b58bdd8661a93634151c8e1ee72e474960 parent 3d813f69028f8591281f7ca450a85aa67a476fc8 parent 19c789c0d8bc1fb284458eb7ff2f54816cb22efb author Cure53 1539242353 +0200 committer GitHub 1539242353 +0200 Merge branch 'master' into SquashingPRVMemLeakRGWyxGtree f8d3d6afb6ec08f94d04fa10b63ee7859e24ffe3 parent d9e463f2ea1ed5cb468bbe2902a195d05f0dbdc7 parent 88022e2348758994dadd4e7e1e6942aef3dc0c47 author Cure53 1539241706 +0200 committer GitHub 1539241706 +0200 Merge pull request #307 from tlau88/AvoidCFGReprocessing Avoid CFG Reprocessingdxtree f8d3d6afb6ec08f94d04fa10b63ee7859e24ffe3 parent d9e463f2ea1ed5cb468bbe2902a195d05f0dbdc7 author Theodore 1539108299 -0700 committer Theodore 1539108299 -0700 Avoid CFG Reprocessing Haxtree 5f4a9a346675ec568b53345c9d3b0af38a6f9671 parent d9e463f2ea1ed5cb468bbe2902a195d05f0dbdc7 author Theodore 1538782445 -0700 committer Theodore 1539106691 -0700 Squashing PRV Memory Leak HHx@tree 624a10aa46860dbcef6a5aa55406618ba39a20bb parent 84ba53bbb0ea1a4e31b09ca43274ea77aa7f2270 parent 5a152cd33bbbb67fc30b152c71b8f27bfe6a5ccc author Cure53 1538484607 +0200 committer GitHub 1538484607 +0200 Merge pull request #304 from styfle/patch-1 Add missing var declarations>b> x$tree 624a10aa46860dbcef6a5aa55406618ba39a20bb parent 34dc2c17350fb96548e9bec5e879522053f9abcb author Steven 1538270027 -0400 committer GitHub 1538270027 -0400 Add missing varCB x$tree 3c79d4768653fa8de28ca6ac099f9ae70567f182 parent 84ba53bbb0ea1a4e31b09ca43274ea77aa7f2270 author Steven 1538269883 -0400 committer GitHub 1538269883 -0400 Add missing vara4Bǖxvtree 89ac213384801d9ec6afb88ae75fae12ece185d7 parent 7a9764a59b459951569034c73230af31fc1e2472 parent f95163f6a0ed059f86739371b6884609c5d09c91 author Cure53 1538212173 +0200 committer GitHub 1538212173 +0200 Merge pull request #303 from mikesamuel/make-everything-harder Hardened to resist interference by naive code in other modules.t \x?tree 89ac213384801d9ec6afb88ae75fae12ece185d7 parent 7a9764a59b459951569034c73230af31fc1e2472 author Mike Samuel 1538162745 -0400 committer Mike Samuel 1538162745 -0400 Hardened to resist interference by naive code in other modules. This doesn't make it impossible to pull the rug out from under purify code, but does mean that it preserves semantics in the face of naive code that does the equivalent of * import(a)[b] = c where (a, b, c) are attacker controlled strings * Builtin.prototype.newProperty = polyfill This does not atempt the much larger number of dependencies on builtin prototypes like String.prototype.match or Array.prototype.push. So if an application makes existing properties on the builtin prototypes non-configurable and loads purify early then purify should preserve semantics. ---- Specific changes include: * Modifies util.js addToSet to separate "set" objects from Object.prototype * Modifies util.js addToSet to not reassign to arrays when no change is needed so we can freeze whitelists like those in attrs.js and tags.js * Seals RegExps in regexp.js so that we can rely on their test and exec methods being the ones defined on RegExp.prototype. * Throughout, grab static methods like Object.freeze early instead of relying on polyfills not to overly aggressively replace them. * Throughout, prefers Reflect.apply to Function.prototype.{call,apply} which can be masked. zxtree 0d7fc10707f8ead48b83f4503eec9aea1a0635df parent 109398d69a41353d215a18d6cc64dd78aaa86867 author Dr.-Ing. Mario Heiderich 1536699453 +0300 committer Dr.-Ing. Mario Heiderich 1536699453 +0300 Re-added Edge mXSS checks Lxtree f2f19755a5ff07d8845d31369b1399e652460e7b parent b298247bad2dadbdd262f19cb91e4dc9d71d6ca9 author Dr.-Ing. Mario Heiderich 1536698343 +0300 committer Dr.-Ing. Mario Heiderich 1536698343 +0300 Fixed the tests Ix#tree 0b928cf53799493fb87b7ed6432f13d81876d5b4 parent c15049795857400d3a0aba3b584aac0d43902b03 author Dr.-Ing. Mario Heiderich 1536694573 +0300 committer Dr.-Ing. Mario Heiderich 1536694573 +0300 See #301 Attemptinmg another, safer fix for the SVG issue aV_x,tree f2f19755a5ff07d8845d31369b1399e652460e7b parent eb440a3ad1e520789247858350c70d885802a44f author Dr.-Ing. Mario Heiderich 1536692425 +0300 committer Dr.-Ing. Mario Heiderich 1536692425 +0300 Fixed the tests to reflect on the removal of the removeTitle option y[1xtree 0b928cf53799493fb87b7ed6432f13d81876d5b4 parent 92953bed41af31d894e06fb6b04186c3fe948795 author Dr.-Ing. Mario Heiderich 1536691944 +0300 committer Dr.-Ing. Mario Heiderich 1536691944 +0300 Removed the temporary fix for outdated Edge's XSS Uxbtree fca818f76999d71f2b9d26cb1712093144419c04 parent 603c64bbcca96f3520f4d1cfcefc31c8ad164049 parent 4b33ae83d3891f82dca8f147ce9f14cad3517fc3 author Cure53 1536589822 +0200 committer GitHub 1536589822 +0200 Merge pull request #300 from edg2s/leading-whitespace Preserve leading whitespace when FORCE_BODY is falsemDxtree fca818f76999d71f2b9d26cb1712093144419c04 parent 603c64bbcca96f3520f4d1cfcefc31c8ad164049 author Ed Sanders 1536580972 +0100 committer Ed Sanders 1536580972 +0100 Preserve leading whitespace when FORCE_BODY is false Fixes #299 Tsx tree 9beb45cc80cf3da7a7cfe5612c873d53366068b4 parent 5ea713a3edb37e321360dfa7f2473e9b025d4418 author Mario Heiderich 1536416020 +0200 committer Mario Heiderich 1536416020 +0200 Getting things ready for 1.0.8 BHx tree 5350a1577a7dacfd6bb50fff2813d3f890aa2d88 parent 810eae22634a0f627b55d886b1e2020fd27bd6a2 author Mario Heiderich 1536415503 +0200 committer Mario Heiderich 1536415503 +0200 Made _isValidAtribiute safer against gadget XSS, thanks Jun for the hint! YxEtree fca12a2bd272c475a469f208ea9fbd4dc703232b parent 20dfded78b23f9b879c245749c07bb4268e85737 parent 2d0301b8e73b2a4e6195f7db7ade1ba1c0dcc2a9 author Cure53 1534957085 +0200 committer GitHub 1534957085 +0200 Merge pull request #297 from styfle/patch-1 Change npm publish to "dist" only;bxtree fca12a2bd272c475a469f208ea9fbd4dc703232b parent 20dfded78b23f9b879c245749c07bb4268e85737 author Steven 1534953188 -0400 committer GitHub 1534953188 -0400 Change npm publish to "dist" onlyLHϔxTtree a9e29b8fdf1487ed6a2d90368802feea3f7b1d52 parent 068f582acf01fee4bafd2953fac26405dc4aba29 parent 603111f5e0a38b85680232a1d5ce0f5b55288674 author Cure53 1534948050 +0200 committer GitHub 1534948050 +0200 Merge pull request #296 from styfle/patch-1 Add badges to display gzip size and install size}h6xtree a9e29b8fdf1487ed6a2d90368802feea3f7b1d52 parent 068f582acf01fee4bafd2953fac26405dc4aba29 author Steven 1534946572 -0400 committer GitHub 1534946572 -0400 Add badges to display gzip size and install sizex}OŸxtree 63f4c6cbc7acace2e96fe37d1624721e78fec1d7 parent e30ff123fda1051963519907cf1454f2a36a26f4 author Mario Heiderich 1533906744 +0200 committer Mario Heiderich 1533906744 +0200 Fixed one more IE10 test G/xtree 80d90f4fb93ef378f5e6c7d7d2d77913c93b6f29 parent b2580872eb7cfb95573d8936e50ffcec867a670d author Mario Heiderich 1533905484 +0200 committer Mario Heiderich 1533905484 +0200 Fixed rollup config Fpxtree 05b9013685407e9b8100f2e1364b69ea7d795288 parent a00c6bafbbf2a817639cbacdadbd97f670e46dda author Mario Heiderich 1533905319 +0200 committer Mario Heiderich 1533905319 +0200 Fixed a missing comma tFxtree e8d284c134d360142adf90b542f8c8083829e8e7 parent 8cd5d96edb3faca4be904755724e75fd6f406d9e author Mario Heiderich 1533904108 +0200 committer Mario Heiderich 1533904108 +0200 Fixed the tests for MSIE11 and Edge oJxHtree eb7485f0071548574785aec67e950721f4572eb5 parent 5752b61e2f5e73d348caf2c9a9164955945b396a parent 9e5e333088cc67aacd3c0194b3546d25404d0a53 author Cure53 1533894446 +0200 committer GitHub 1533894446 +0200 Merge pull request #295 from choumx/svg-ns-attrs Fix missing attribute namespacecxtree eb7485f0071548574785aec67e950721f4572eb5 parent 5752b61e2f5e73d348caf2c9a9164955945b396a author William Chou 1533852734 -0400 committer William Chou 1533852734 -0400 Fix attribute namespace missing. 1533721277 +0200 committer GitHub 1533721277 +0200 Merge pull request #294 from freddyb/patch-1 critically important security-relevant typing error.]k%x*tree b7e91601951d057280562cbaa02ae97170699b9e parent b1a9f90a9cc27dfba4e03a50c50c51e6f516ad47 author Frederik B 1533655268 +0200 committer GitHub 1533655268 +0200 critically important security-relevant typing error. fixing a typo. in tests.c_xtree b8904be1fca5a4bc095ed929c759fd8cfa5874a4 parent 147aebfee5e7a8fffe6fff7bf1d463b2a6047d88 author Dr.-Ing. Mario Heiderich 1532874008 +0200 committer Dr.-Ing. Mario Heiderich 1532874008 +0200 Getting ready for 1.0.7 u0M6xtree 6c8901bfce7762f37eb41cca9433457d14b098dd parent edaa468f9aff1939551b51550b1626fbcf23cbd9 author Dr.-Ing. Mario Heiderich 1532776795 +0200 committer Dr.-Ing. Mario Heiderich 1532776795 +0200 Fixed a vulnerablxe dependency {mOܗxtree 71c8d61696af26319a32b7a2a130c8b7dadcfd58 parent 2343d2799582f1ac14419612d4195d883c11da8c author Dr.-Ing. Mario Heiderich 1532775919 +0200 committer Dr.-Ing. Mario Heiderich 1532775919 +0200 Added test for Gareth's bypass ~}Nxtree 4ef379fa45c71637c6994a2b4d91fcbf5b1595f2 parent d2414d63805a497bba9252b7283ec84b0f5a25b8 author Dr.-Ing. Mario Heiderich 1532775495 +0200 committer Dr.-Ing. Mario Heiderich 1532775495 +0200 Added better fix for Gareth's mXSS bypass UR9x)tree b8c78f208ce8179936bbfa0016e9dec6c5ade911 parent 10daa20df6919adfad127c428d6fa4383113f471 author Dr.-Ing. Mario Heiderich 1532773843 +0200 committer Dr.-Ing. Mario Heiderich 1532773843 +0200 Fixed a bypass affecting outdated MS Edge, found by Garteh Heyes ԃZxtree 9ff2d0dfbc4d0f1013e6f3a15d84fb0c0493ed16 parent 40fdc489118d52cca9fba8adefeef7cd287996bf author Mario Heiderich 1531750369 +0200 committer Mario Heiderich 1531750369 +0200 Updated dependencies aHnx tree cd00f5ffd2979100957e9699167a0b00ad4b1aae parent de99a4a0c9b64a934069ba144330343de3c64f5a author Mario Heiderich 1531743438 +0200 committer Mario Heiderich 1531743438 +0200 Getting ready for 1.0.6 release SI)xtree 3bc916b40393cff84f1893b3ecdbbdb1cd1aaad3 parent 7b1234226e29576ff499e4f5a5f638cc411458c8 author Mario Heiderich 1531384108 +0200 committer Mario Heiderich 1531384108 +0200 Changed img@src in IN_PLACE test to a@href Mxtree 47a4149b6eed2c805b718f6492f118c654aac879 parent de60c223ecca56b1d188be676837b50de95f00ae author Mario Heiderich 1531382475 +0200 committer Mario Heiderich 1531382475 +0200 Made the IN_PLACE tests work in Edge/MSIE #vLbxHtree 37a03ff6624c4f112641ee15191ddccb2426cabb parent 7e0dbbb50ba5790bebd626d55d1d53a574c9d081 parent 7202a9d0b26f9b44c71862d8543dd0c386cee612 author Cure53 1531377768 +0100 committer GitHub 1531377768 +0100 Merge pull request #292 from choumx/is-attr-valid Add DOMPurify.isValidAttributeEdFxtree 37a03ff6624c4f112641ee15191ddccb2426cabb parent 3b3a47e9ccbbd7cd555474e33d0565b88f6999b9 parent 7e0dbbb50ba5790bebd626d55d1d53a574c9d081 author Cure53 1531377147 +0100 committer GitHub 1531377147 +0100 Merge branch 'master' into is-attr-validc\VMxtree b10a589f794676629514e019f6784cb47dad7310 parent 489538882385415ff8eb9861646743cf95f672ea author William Chou 1531339028 -0400 committer Cure53 1531376963 +0100 Rebuild and add unit test for IN_PLACE config. JKxtree 8c948eff8a36c00e56b992332e933dfedc682d0a parent 489538882385415ff8eb9861646743cf95f672ea author William Chou 1531346655 -0400 committer William Chou 1531346655 -0400 Add DOMPurify.isValidAttribute. MKxtree 889c0eddb86c8f08b6a6dcae49b5465577b246a5 parent 56394573be93f672c351482af21cb8c41ace4de0 author William Chou 1530645941 -0400 committer Cure53 1530894184 +0100 Early-out return. _BՒx tree fa696dbf326eef0a38e0498ccbd9d1e05cb3a206 parent dc8b54261ecfdd7a175a1e1d93a6c8d0b198d3a2 author William Chou 1530645582 -0400 committer Cure53 1530894184 +0100 Sample implementation for IN_PLACE. HJ x+tree 2985df40b7822eed484ccf755b960808cd2dd16f parent ceaf52c6c147a413a21c190d23c2a42153192f71 author Mario Heiderich 1529400816 +0200 committer Mario Heiderich 1529400816 +0200 See #286 * Fixed a loop when working with tables and ALLOW_TAGS * Added a test case YExtree 9aa925a3783882db2b5913c9b9e1470862e8f8fb parent 069bd0987e216f4ec7a15c2cc4614991c04c1cb4 author Mario Heiderich 1529155561 +0200 committer Mario Heiderich 1529155561 +0200 Preparing 1.0.5 Release Fxtree 6cd12b3dae09993f3108943db2a384378b034104 parent cd6cfbe5a6498a186fba4af2f783da7fd66ce240 author Mario Heiderich 1529154878 +0200 committer Mario Heiderich 1529154878 +0200 Fixed all linter warnings Hxtree a81987c5a379ac434cc9d801801706426feb0e17 parent 144744ea08ad6874109e5d3a111c089373b21cba author Mario Heiderich 1529154188 +0200 committer Mario Heiderich 1529154188 +0200 Removed the Safari bug-fix as suggested in #281 !^Mx;tree 83a7997599605491290c10d75feb6a30ceb92585 parent c29bc15b62a635d072dae9974825545f6ea388c6 parent 714a788d37158716b80e9deb34e3d36194fabe8a author Mario Heiderich 1529153527 +0200 committer Mario Heiderich 1529153527 +0200 Merge branch 'master' of github.com:cure52/DOMPurify ϼ]x tree 987002a5b504b1a8616da1f01a97482279398e60 parent 87992fa9d36d8686017c81c0b99ad726399805d0 author Mario Heiderich 1529153364 +0200 committer Mario Heiderich 1529153364 +0200 Fixing a loop mentioned in #285 ~Grxtree 83a5c9752ccf943965362a11f82f045a38aed225 parent 87992fa9d36d8686017c81c0b99ad726399805d0 author Georgii Dolzhykov 1528878052 +0300 committer Cure53 1528881131 +0200 Add a test for #283iD=x tree fd26358d9e147364927b91cddf49e5ef3b53b220 parent 20d1cc2dac33dbad2f275f71404238a27b13dfc8 author Mario Heiderich 1528873304 +0200 committer Mario Heiderich 1528873304 +0200 See #283 Changed the HTML mapping for SAFE_FOR_JQUERY Oxtree 0c8dbea52840e861900ae27c6bedb812f161b4cf parent 61d7a9d8b9f2e5ba73f132430a0aa5a4a943c2ae author Mario Heiderich 1527256517 +0200 committer Mario Heiderich 1527256517 +0200 * rolled back toLocaleLowerCase usage NMxtree 159e2815a6bd8892e0822aab6f709c7dd1ac56f2 parent 466d4515a8107cef4ff78bdc18a881b84b4aba21 author Mario Heiderich 1527255759 +0200 committer Mario Heiderich 1527255759 +0200 * fixed remaining tests for Edge 17 K4x tree 760d3f33b1c76b8469a2d65ba8f87f6f59fb4b2c parent 7c3d17657fc61efe4e392b3d846335635a94a68d author Mario Heiderich 1527255654 +0200 committer Mario Heiderich 1527255654 +0200 * fixed some tests for Edge 17 ,Hxtree bfbb3d772dd5f679474ba7f33385c5cdbacd6f53 parent 68fc574463bb6fa3933f45b8d105ee9e1aa44c0c author Mario Heiderich 1527254418 +0200 committer Mario Heiderich 1527254418 +0200 * attempting to work around build failure O/xtree bac42dd107b072e060b72ae29ad7a6ee19165d7e parent ad9b67212550da193ca083558872de3b07c302d5 author Mario Heiderich 1527253315 +0200 committer Mario Heiderich 1527253315 +0200 * removed Node 11 again :) pFxQtree b3f45811ec2424f057d42dda952e245d2ef04a58 parent 8091ce993b84b198c76078ce2585a255edd38cbd author Mario Heiderich 1527253133 +0200 committer Mario Heiderich 1527253133 +0200 * removed test coverage for Node 4, 5 * added test coverage for Node 8, 10, 11 * fixed the Safari 11.1 browserstack config f.x0tree 2e317b68b5e8b56b391829683eef8078c3c81df4 parent 6b37960f226e207f32e999e0435997021b5ded68 author Mario Heiderich 1527250131 +0200 committer Mario Heiderich 1527250131 +0200 * added new browsers to test against * fixed an eslint error caused by control char regex O]˕xtree 4b37140acf65de40f9d02e4792a537893699efd3 parent 29fb0b6cd61fe6578957a69bee1c6a84b7663876 author Dr.-Ing. Mario Heiderich 1525271075 +0100 committer Dr.-Ing. Mario Heiderich 1525271075 +0100 Exchanged toLowerCase with toLocaleLowerCase PT;x:tree e90e27ea3bb12c6604fdeb76c7bb1db6d32e1ced parent 9e152c207ff16ca2877195e5a015f3a158991e7e author Dr.-Ing. Mario Heiderich 1524920238 +0200 committer Dr.-Ing. Mario Heiderich 1524920238 +0200 Prepared 1.0.4 release Signed-off-by: Dr.-Ing. Mario Heiderich ^xtree 3ffeb1fd568ffcbfea8c8ad34a11f9dfb00d73fe parent 6a35bd10a1fc1b5d59db3f34820d2ab5b7d96869 author James Kraus 1521593763 -0700 committer Cure53 1523944019 +0200 Whitelist preserveAspectRatio0BJ4xtree e509c97a46b42baeba41d32b6e70a1f544a9c07a parent a8417814d452c8025078e97460646069ef3df46c author Yehonatan Daniv 1521462263 +0200 committer Cure53 1521462405 +0530 Added missing light filters in svgFilters 5KؑxAtree 4eebfaf4560b106086af9d0587333ce498e518fe parent fbc0d3e9fa82d71959879b05953a33de0c8a7a6d author Kirt Gittens 1516807493 -0500 committer Cure53 1516807738 +0100 Update code example to show usage with older JSDOM API Demonstrating DOMPurify usage with the older JSDOM APIRd"xtree 89037073d44551720cc3193040592a0c03f997e9 parent 873ca792532ba6c5e14d3592222820abea491509 author Dr.-Ing. Mario Heiderich 1516805051 +0100 committer Dr.-Ing. Mario Heiderich 1516805051 +0100 Generated new package-lock.json h7M)xtree 4f1d0d6c5551687534ed600f5d257c5cab0f6c65 parent 765d7b105b2ce3329c332a469a476334102f9250 author Dr.-Ing. Mario Heiderich 1516804566 +0100 committer Dr.-Ing. Mario Heiderich 1516804566 +0100 Updated jQuery version for test suite GPxtree 2ca7fc286a22d022aaedbd26507a9f61ecd52067 parent aca7810ba0b1784d438468040be8f884b2047398 author Dr.-Ing. Mario Heiderich 1514915421 +0100 committer Dr.-Ing. Mario Heiderich 1514915421 +0100 See #264 Added test ŠI xtree 694c5966fc998329990b4401995b60657e5cff2e parent ea2269318e629930df0526a512dff0a1e201e2da author tdeekens 1514305636 +0100 committer Cure53 1514327062 +0100 chore: add prettierrc and *ignore M3Extree 055c6f03b6a29be9dc48454e288835934750fa1f parent 768188500b3d748530afb7966ce973fded582a00 author tdeekens 1514305334 +0100 committer Cure53 1514327062 +0100 chore: update rollup API %B*xtree a704e50942dda974565d4e3b7083be9af4454c93 parent 27a6ac39fbdbac164c0065d951f24f6e48e28b57 author tdeekens 1514304932 +0100 committer Cure53 1514327062 +0100 chore: update dependencies $MDZxtree a1e8255b96c9a5a80eb5a643dd9cc04b0577747b parent e14b57af8f8de176f47d17ad9778582ab212f3d9 author tdeekens 1514304651 +0100 committer Cure53 1514327062 +0100 chore: update lockfile KBxtree 4e3a5398c660d52ef568cdb2b6f400cc89d58bd0 parent 3637bdc2a540f66392e4a8f747d948579c08a5a7 author Mario Heiderich 1512730951 +0100 committer Mario Heiderich 1512730951 +0100 Fixed annyoing npm autoversion issue Lxtree e64c4795e3707777958633a4364d81b942bb8f81 parent 3341d17c906081df7316e473e50a5267be903659 author Mario Heiderich 1512730528 +0100 committer Mario Heiderich 1512730528 +0100 Preparing 1.0.3 release dDv x#tree 4c02f1e355a00bfebf4696e6dfaf98cbce3ea5c4 parent 83c5436431b504d0ae859e8a2a74ee3e78aa2f2e author Mario Heiderich 1512730102 +0100 committer Mario Heiderich 1512730102 +0100 1.1.1 @̜ x#tree 54e9204a99c41e4d7f3ffdba8a31b5afa65b8662 parent b0904604f5a00a318002b535c5bd0380ae7342cc author Mario Heiderich 1512730010 +0100 committer Mario Heiderich 1512730010 +0100 1.1.0 *?Ux tree 5f092d1b55b1a1323c95a5d2d512e930e2c0f55c parent b4eced38c02a3b6f23ed128b154086d9ddfa3034 author Mario Heiderich 1512375670 +0100 committer Mario Heiderich 1512375670 +0100 Rolled back _isNode changes HԖx tree 367392326f50a4a24e7dda1b8f2e0959bdb1857a parent 0b75ddde05e79c0b59dcb1d5bd4b8786efe325cd author Mario Heiderich 1512375487 +0100 committer Mario Heiderich 1512375487 +0100 Trying to harden the node check Kxtree 5f092d1b55b1a1323c95a5d2d512e930e2c0f55c parent 020fc63f6981fa0f494a0fc6891beced330de533 author Mario Heiderich 1512375017 +0100 committer Mario Heiderich 1512375017 +0100 Added better type checks for assumed dirty string Q!xtree d2c0c4ed6cf713506f021f24a7b17952415c6ea5 parent 8971f171aee7efed1260b9466675905fe5cdbcea author Mario Heiderich 1512115313 +0100 committer Mario Heiderich 1512115313 +0100 See #258 Removed a legacy clobbering test hMx tree 7cc3d6eb558a2d0203311cc44baeb6a1f975f715 parent 9cc80528aa8d5f0380a4e07fdc28dc02b5d2f07d author Mario Heiderich 1512115051 +0100 committer Mario Heiderich 1512115051 +0100 See #258 Changed the clobbering check to only look in forms and document Xtxtree 918e5696e5c3a6b2532ca41e250302f440bed9f5 parent 15e019139003fca786005ce54c66cf5954a4f35b author Mario Heiderich 1512112798 +0100 committer Mario Heiderich 1512112798 +0100 See #258 Refined the DOM clobbering check Kkxtree 31085d1ac885d3e4ba23e7c590114ae3b3ca86b3 parent d17cf0d837acc8ec1007d88a824959e61514cff6 author Frederik 1511964021 +0100 committer Cure53 1512032400 +0100 Allow crossorigin and integrity attributes in HTMLN*xtree e6c0b737d61ae4b76b0499171d3f121c162321e5 parent 1387151651e6318fd92fff58180196da36eef70b author Mario Heiderich 1510149314 +0100 committer Mario Heiderich 1510149314 +0100 Fixed indentation D[xtree 030f66b1706623431aa8fa550a26b6210156492d parent 4a365e4c7e06fd58ce2aa640c90dbe1dc026be4f author Mario Heiderich 1507814781 +0200 committer Mario Heiderich 1507814781 +0200 See #255 * Fixed a test uE xtree b9a9d8c1869e57b627f19e5142ad8abce42b4e5f parent 1f4a4765ea62a669ca63add0b7b4bc6e1e815242 author Mario Heiderich 1507814008 +0200 committer Mario Heiderich 1507814008 +0200 See #255 * Added srcset and sizes to allowed attrs * Added test TPx tree aa89467e0d7a011212eeb5a5e55af8dffa44eddf parent f269fb6b2d2b90028438cc715512bf27d1b33814 author dhoko 1504628280 +0200 committer Cure53 1504682235 +0200 Add a test for the new flag ALLOWED_URI_REGEXP HVxtree 8121ea84e9a75e0c056c705a5eef3d937b4ee2b9 parent ffe9ebfeb29139793afd855eda21d2eb36636c45 author dhoko 1504618226 +0200 committer Cure53 1504682235 +0200 Improve doc and build dist :tada: Extree 89be2e19cba8c1f15e02543c3b63d4e04b3202d8 parent 1a246e0d4514e4f4231754349e44152e29965f2f author dhoko 1504618198 +0200 committer Cure53 1504682235 +0200 Allow user to extend the protocol regexp %G x(tree 148bb454588a8138f0e448c944e3ec1624e2c904 parent fbcff3ab95a628b0e5be1d071b94092876a604c5 author dhoko 1504608864 +0200 committer Cure53 1504612661 +0200 Build dist :tada: _>vxtree 7d0f5d809df72328011ea7a61b4aa45b3ded7b19 parent 6fff9acbc7ef7e93fbd9c27459ad53c506f348ab author adrien 1468413158 +0200 committer Cure53 1504612661 +0200 Add new schemes in allowed protocol list ALIŗ x(tree 874a892cb5e9b390773f0e2c11c8606e1d88cabc parent 300967161da95a773e153b192f8818972902f4c9 author Cure53 1503687510 +0200 committer GitHub 1503687510 +0200 Update README.mdx=xtree f3095c5bfb946ff0b171e13e272d95e7383e46bf parent fbbeb1b47f20cd1e46373e5e1531aaa25e925ac6 author Mario Heiderich 1503670797 +0200 committer Mario Heiderich 1503670797 +0200 Changed package.json Fxtree 490ace9df90a183b537f201cc6c507878702b433 parent 67b338f86a22ae67835835dfc0a84b790adc0808 author Mario Heiderich 1503670711 +0200 committer Mario Heiderich 1503670711 +0200 Preparing 1.0.2 release KEx tree 5b5672d7b75cdbc8df6446a2f060a452b27025d2 parent 2d4078cd27da3344cbf0a8cf4a91f300fe47de86 author tdeekens 1503335305 +0200 committer Cure53 1503337569 +0200 refactor: getGlobal in factory iK;xtree 7d0b8b2ea6a0748a2d7a1f727ed5698dbd8d4f9b parent 14475b419309981de46d349cc6e6877ff3dc4e81 author tdeekens 1503315633 +0200 committer Cure53 1503316094 +0200 chore: remove dist/src and add more to files SOӝxtree 568d8e629fba2b2d493162209b6c84218a4bd385 parent 0f3fb66a81807dc64b96a173c5e873e70a0db80b author Mario Heiderich 1503298815 +0200 committer Mario Heiderich 1503298815 +0200 Prepared 1.0.1 release >Extree 3868228311d25b36ea2ac6e918fb0f7775ad08ff parent 61685bb6ac7defcb5851cefc0d05f6946b7b7a8c author tdeekens 1503296852 +0200 committer Cure53 1503297824 +0200 test: fix TRAVIS_PULL_REQUEST being false on master Lxtree 82e0225f48955b0ad18a87934eb37414a096d247 parent 9a28c4cde00d811f1895ce240fffa812b0759558 author tdeekens 1503296714 +0200 committer Cure53 1503297824 +0200 test: readd all custom launchers WExtree 1a8c01c7dee679f0aab0018463fe69e60058c4a0 parent 1f2a09d81341f20f8257b6ef1b5bd6d9312ca906 author tdeekens 1503268144 +0200 committer Cure53 1503294255 +0200 test: on firefox for all node versions hHuxtree 81da7d742a6d104d540c2c34274a9ec61d9cd540 parent 7cb34905230e73bd704aa869dc5bcc23e38018d5 author tdeekens 1503265958 +0200 committer Cure53 1503266756 +0200 build: fix rollup bundling =D x tree c996506f8ca6d13c1a5a6855a2b63cfc554f7ecf parent 1482ce852d85a2a8ae94c7dd29c7c29a70cb1a67 author tdeekens 1503262297 +0200 committer Cure53 1503266756 +0200 test: fix testing the cjs build on JSDOM IBxtree 306bab2a3e92e72e9e7eb4bb800bb6aa186ae4a4 parent c52312dc273883693fe0baabc26c969899b411d0 author tdeekens 1503261276 +0200 committer Cure53 1503266756 +0200 build: test on node@8 (also via BrowserStack) BJ™xtree b55eadc36792a3f54ab1743d5ebf9ab6a0ffd9c2 parent e7c3c9fb451595b499cc1019a71ae205271e5654 author tdeekens 1503261240 +0200 committer Cure53 1503266756 +0200 build: add less verbose output on CI from karma Kx tree 2e2dfaae9d50385350d597a8271d6296e6e235b1 parent 42bc2ed186aca9afa1bc8096d14a591f92c651f2 author tdeekens 1503260835 +0200 committer Cure53 1503266756 +0200 build: run against firefox in probe mode 'I_x tree 9815e3f526d5b12eda4b37929d471153f6e09438 parent 9170bd70ebf8963d065ecac34720a3b136389237 author tdeekens 1503259840 +0200 committer Cure53 1503266756 +0200 build: add cjs/es versions to amend script eHşxtree 1b6865f2bbb7746f87b6688f306b9e2e47418eef parent f8242e6a830c9e95566e7e0f5b6179a5e76aeb86 author tdeekens 1503259723 +0200 committer Cure53 1503266756 +0200 docs: document switching when testing 7Hxtree f0035b92acb0d7308176b5c7a202f8617eb56c9b parent 157f694390bfab857769c4c3c0da27186e583673 author tdeekens 1503252099 +0200 committer Cure53 1503266756 +0200 build: add options to karma run GExtree 5057c57224ef0d1fc8c6d4970c1b52bdc4621600 parent 2cae7be8274d66bb6762dc38c8e9f71add598c49 author tdeekens 1503252076 +0200 committer Cure53 1503266756 +0200 chore: add dependencies to package j,G+xtree c7072d5017bf35904a81fa97019ccce6491de299 parent e2e1d1c24e9846de22c280cbb9ca0e8abaeef9c5 author tdeekens 1503131704 +0200 committer Cure53 1503152481 +0200 chore: configure karma-rollup mFhxtree b16623dedaf34833ecd60273afa390ab749b07a2 parent a7a98c05de2da5b05dd5dbef55d151d0d7108a39 author tdeekens 1503131695 +0200 committer Cure53 1503152481 +0200 chore: add karma-rollup C x&tree 8eaa5cac8e8ef5f2758546e183b4f7d30780bca1 parent 7fa8b665effc7f8718723ad9e1519f30ed1896da author tdeekens 1502914677 +0200 committer Cure53 1502985188 +0200 chore: add dist @Đxtree ac4fa509794a665f680261a8781e13fbf42ad0b1 parent 58f3c8e49a96e2cfa63d5e9048ab7a756309175e author tdeekens 1502914656 +0200 committer Cure53 1502985188 +0200 chore: remove jshintrc Bԟ x tree b7dd0e0ced5e05f63a91d528a4ff005aef5188aa parent 5d55198daa1ddfa1b008df0976068c9cb4a493aa author tdeekens 1502914647 +0200 committer Cure53 1502985188 +0200 chore: format babelrc %Cx tree 0266a06cbcbf81f1644146418680a78884d5cdce parent c9a2d1f4048a3cd83e87ffda12c0d155d2b06235 author tdeekens 1502914632 +0200 committer Cure53 1502985188 +0200 chore: rollup to pass in default format and bundlesize not in test R֔xtree dedc62a019dec393c8293a95ba2a0880fbffb918 parent 7fa04e4bec025e7591e5f61dca9347d38e6bd657 author tdeekens 1502914599 +0200 committer Cure53 1502985188 +0200 chore: update dependencies Ekxtree da11ea0901ff1f9caf710a1e309fb9223e926514 parent 5f6fd43a0f11c53ed03bd1a2c5d6388d401d0161 author tdeekens 1502867037 +0200 committer Cure53 1502874300 +0200 chore: add package.lock kB x%tree f3b7907ff3da802f97611a2353441172266a2469 parent 3114f5f60bb0ed516e24ef237c5a83baf9381797 author tdeekens 1502866747 +0200 committer Cure53 1502874300 +0200 chore: add build ú?xtree 0fa0f0f2a361f54632f73f40b6f69c65c87a9a7e parent f85e93e0200eeefed10748e017e0f1a9d4d05783 author tdeekens 1502866737 +0200 committer Cure53 1502874300 +0200 chore: rollup config to produce targets NIkxtree 037f5116c8e5e52a572b4b5e4ceec615fadda7b8 parent 853e35daa6e2dc006ab30eda45f8c51ce3b0ee0e author tdeekens 1502866711 +0200 committer Cure53 1502874300 +0200 chore: update dependencies %Extree 25319b30a0e59a6dd15bb988214e261f43083206 parent 31ae2812939f37459f731087cf2b177dbaaa5e92 author Mario Heiderich 1502812968 +0200 committer Mario Heiderich 1502812968 +0200 Added note to README RD xtree 40a037dd93516dabadc45abda0ac4d83e3950c00 parent 270acf54934a6c0e4a2d36d79d7db865c39c4a86 author Mario Heiderich 1502809874 +0200 committer Mario Heiderich 1502809874 +0200 Added correct version to website NKxtree b52293f0a86cfbf3f1bb57f07883074d25979110 parent 8dfe20c4a004e09a8630ba8d5ed69850e46794b8 author Mario Heiderich 1502809460 +0200 committer Mario Heiderich 1502809460 +0200 Preparing 1.0.0 release {Ex tree fb657bc5969570d3ec7249e189b4a999bdcfa031 parent d6caa38b2868d3636648c59c67e1b9d77c598585 author Yehonatan Daniv 1500972268 +0300 committer Cure53 1500993959 +0200 Added missing xmlns attribute in SVG Jxtree b5917877fed13b60c244cc46c3187542e0a4a9e0 parent 8b625a36bc8e6261db8078fe1748724e16bf6899 author Mario Heiderich 1500578967 +0200 committer Mario Heiderich 1500578967 +0200 See #215 Maybe fix the Safari error? :Ixtree abae9204c50975be43f2b1d85faf5848a540531a parent f85fbccc7f72dae6b9dc120ef68d0be8506d360f author Mario Heiderich 1500373484 +0200 committer Mario Heiderich 1500373484 +0200 Fixed tests in MSIE / Edge {H6 x&tree 6edfb171c76423f884d7b76f35583a16294d049a parent 701acf5fbc9c6dd5eeb929f718b91cd7103298e1 author Yehonatan Daniv 1500367224 +0300 committer Cure53 1500370932 +0200 See #236 >xtree a4c65985225d772f43de2bb26c8d87d82f1bdc23 parent a8f1ef46f5d3a752f10899ea4c5777969356f65f author Mario Heiderich 1499975616 +0200 committer Mario Heiderich 1499975616 +0200 Fixed failed Edge test PFĘxtree 5a0b16e96d11ff96aa3e58e5241eb5922d22be67 parent 3fba42559e4d2e8279d416fa2ca37dd1e2e3336d author Mario Heiderich 1499975141 +0200 committer Mario Heiderich 1499975141 +0200 Fixed indentation }E՚xtree 62480467cfed7ba4f20ceef5f7ff7cfb8b244029 parent 99f581ade69b6873cc3151dcc4c070bab7e734c5 author Mario Heiderich 1499971327 +0200 committer Mario Heiderich 1499971327 +0200 Added a contributor 2F x&tree 9a42ad08ad44e7b004e62db2687eac7a31a1af37 parent 6338ef5938f7ee1ce782b4355451144d610da05a author tdeekens 1499893200 +0200 committer Cure53 1499971041 +0200 build: add dist T??ˑxtree 4e0c81f1d72cbba7490db5258a2fadd3a8b1ae80 parent 3fcf2cea0d2091b620118bf85da5dcc2d20da5ad author tdeekens 1499893173 +0200 committer Cure53 1499971041 +0200 build: re-format due to prettier update Jxtree 8af25f8f52b5d26a97353cc4aee1601aec6bc943 parent 120ea26c2a4a4c521acdeed460494fdd65998135 author tdeekens 1499893066 +0200 committer Cure53 1499971041 +0200 build: update prettier Cxtree 81eda68314e783a5f4697ea4911f39cd059adfbb parent 2c4063ccdd6f12225b9d9f0fdbd24aad1a00fc5c author tdeekens 1499892819 +0200 committer Cure53 1499971041 +0200 docs: update readme for installation instructions `Nȑxtree c76557c94c5e17455c8f907a5ed545a2bc89d384 parent a0afdfec33162d4d704150f2472ba2fbe6e02f33 author tdeekens 1499892296 +0200 committer Cure53 1499971041 +0200 build: add package-lock uCx tree 0f0ce4d88bbd5c8d9c5ef8ac158357beadccc697 parent 8af9fef7709daca94cc7d713e5953e9257611440 author tdeekens 1499891901 +0200 committer Cure53 1499971041 +0200 build: add dev run-script watching sources cKxtree 1e413febb5b770578b9f6f564359a33c4edfc908 parent 783fb8d392679e6bf47ed97378bffee3334d0a09 author Yehonatan Daniv 1499847192 +0300 committer Cure53 1499883137 +0200 Updated source and dist after yarn install 6~M: x#tree 91a66156a1d2836cac47d73373e1636dd0405b46 parent 21e2c0f1beb871a137b61fd744f43bd2af71aee1 author Yehonatan Daniv 1499704473 +0300 committer Cure53 1499883137 +0200 Forgot maps =A0xtree 05287a1fb961c20ef8d81ae51082998866547149 parent 66cd91e423d8a1bd8903217ad0198d67a4fe5418 author Yehonatan Daniv 1499704429 +0300 committer Cure53 1499883137 +0200 Ran yarn format nA{xtree f8c5d54aa1ebee1df2eff6aced2dc022cdf312e1 parent 90f6a9edd90fd29c50a626402f3ee08e92403a76 author Mario Heiderich 1499702487 +0200 committer Mario Heiderich 1499702487 +0200 see #230 Fixed the tests for IE/Edge DKxtree 8765226f2f1dc9977fd3f08b0f633ae53f11eb34 parent e6fb696159a32bbf6291babb59cbd5b1044717cf author Mario Heiderich 1499696597 +0200 committer Mario Heiderich 1499696597 +0200 See #230 Fixed code causing linter warnings (NE x"tree 526ec31cfb2012ce2a1f5f232a37c568d1bfd601 parent 705c0c05917263f8b6ced77d98685ddecc684a02 author Yehonatan Daniv 1499600728 +0300 committer Cure53 1499696320 +0200 Updated maps AÜxtree 3941e01a008370aa629b3b88575894d3cef40574 parent 561492a08b64a693ec979ebd783ffc5c3dee4ba0 author Yehonatan Daniv 1499600714 +0300 committer Cure53 1499696320 +0200 Added test for profile-duplicate attributes M)xtree 9abbd519f51c040904eb06ed4ce1bfe29f333471 parent 042e65ba0aee62ac513d84a192b5a18d73b4c48c author Yehonatan Daniv 1499593002 +0300 committer Cure53 1499696320 +0200 Added attributes that are duplicated across profiles aRQBxtree 1c60ceeb41346f8e3532076a4e5bf46c21a63fe1 parent c6f59a48937c8eaf065470125846952e0012d95f author Mario Heiderich 1499157384 +0200 committer Mario Heiderich 1499157384 +0200 See #228 Fixed the tests (EŜxtree 584610d3878f59416842624a12e4185ce017aa1a parent 121bd69dfd9be65a7d76dd8e67d9d3c244efff35 author Mario Heiderich 1499157132 +0200 committer Mario Heiderich 1499157132 +0200 See #228 Fixed tests Dxtree fdfc6020c1853ade5602a2fa4285ccdf61040d09 parent 0f7abeb880b89af2dd72db1441e56176ff1982cd author Mario Heiderich 1499157040 +0200 committer Mario Heiderich 1499157040 +0200 See #228 Added more tests Gnxtree 266bbe4bde8c2a2e3f75ed9ad9ba5bc8d669471c parent 096f4883534edbf5583b5b5e6b50cf0b74707ba1 author Mario Heiderich 1499104447 +0200 committer Mario Heiderich 1499104447 +0200 See #228 Added additional attribute profiles for USE_PROFILES Txtree cb01eb960c2fef3fb26f7b73ad6c1b1987b2ff82 parent 98e040974e0116a35ba0a18734455367a52dd7e5 author Mario Heiderich 1499098728 +0200 committer Mario Heiderich 1499098728 +0200 See #228 Made profile checks more strict ELxtree 5b0790cc951f2792ac7e025b07b3183f1402d61e parent 9d8bfdb9729834d9976f75e45ad32755b3d95630 author Mario Heiderich 1499097843 +0200 committer Mario Heiderich 1499097843 +0200 See #228 Added new documentation to README for USE_PROFILES Px tree e156b099670524474036d891f039c441736f7bfb parent c639351391b3e68a7c3ba7928e2d1859d73e3971 author Mario Heiderich 1499097512 +0200 committer Mario Heiderich 1499097512 +0200 See #228 Fixed a broken test +`F9xtree 76f9c304d98476e235b7b94cfa827048c1d74cf3 parent c95bf35cc7fd9076e0cb1a11e2f9970001facb00 author Mario Heiderich 1499097433 +0200 committer Mario Heiderich 1499097433 +0200 See #228 Added more tests Gxtree 2a3c76b5d82aa6f344292a9c2bc27e815fa4ce64 parent 4d664416af0a8382c609aed14705603bbd1adf5d author Mario Heiderich 1499097247 +0200 committer Mario Heiderich 1499097247 +0200 See #228 See above Dux tree 42c29e1f83da4df5c09fd4399448a09bcd3111b7 parent 351a7fea31c6c14f8149ffe41c0cd8bf2fd0ae84 author Mario Heiderich 1499097112 +0200 committer Mario Heiderich 1499097112 +0200 See #228 Changed default for USE_PROFILES to null QhO|xtree dcd7d40893f523f44fae4e9a5a95eed918242eda parent 56167e52342a7257cb4ea44577fb48149ef115ef author Mario Heiderich 1499096872 +0200 committer Mario Heiderich 1499096872 +0200 See #228 Changed reset of ALLOWED_TAGS JƝx]tree e677d69b9ca8e456e6966a7739f3cc14727f9b59 parent b2b178fc03b2e67bcebd9e1dfe01b58ed9a5f545 author Mario Heiderich 1499096649 +0200 committer Mario Heiderich 1499096649 +0200 See #228 Added config setting USE_PROFILES Added code to reassign tags depending on profile settings Added first very basic unit test Dnoxtree 885f0be30c3aa521ab98d66e1311f59a6ce76ae7 parent fe0884c8966d056ad4542b6089197ecd5678eeb5 author Yehonatan Daniv 1498649804 +0300 committer Cure53 1498650605 +0200 Updated example of JSDOM usage on Node.jsLxtree 7dacbe76969a1010ff2eac556341ba6fde0dfbfe parent 82dac605f8031cb4f463e215f6436f2332c5e269 author Mario Heiderich 1498581200 +0200 committer Mario Heiderich 1498581200 +0200 see #225 Corrected example output *Kxtree 6e8b924876dd09c39846f9affb397740b9649ee3 parent 14a4be9ca21fd70f10125ce809388a1a342a3127 author Mario Heiderich 1497601559 +0200 committer Mario Heiderich 1497601559 +0200 See #224 Added Chrome 59 to automatic tests oLpxtree 8fd8bf07cd66f8f8c20a710144916b845e4a4c16 parent 62f8afe13d43c3a3301450ba91cea5f5da86c2de author Mario Heiderich 1497134120 +0200 committer Mario Heiderich 1497134120 +0200 Added dist version Extree 26e5cd36ff5eb914b78fd8aac1c94aff95e8a6d5 parent 23aab3b5f5492e326a2c9b98524a52bc7d52315b author Mario Heiderich 1497133424 +0200 committer Mario Heiderich 1497133424 +0200 Reverting changes due to new UXSS :/ CL!x tree 3fdf3efc1f4c6eb966929023f6155e1702a143a9 parent dfb92c5f7e4d0e5c098abf4afb12d054b1ac6d1e author Mario Heiderich 1497132358 +0200 committer Mario Heiderich 1497132358 +0200 Added experimental XHR test IĜxtree 1b34d8eab22c55f0e3c57a24448bd05436b9f2f5 parent 94c29860d83d6b00c1b8bfb05ff74d16a39ed465 author Mario Heiderich 1497115191 +0200 committer Mario Heiderich 1497115191 +0200 Re-added URI encoding eZF. x%tree d43a6d0e0cdf9ef159a2e7f08c9c054bf89ba20e parent 83d72b16f2c35356c166fa94b979a7a26a973c4a author Mario Heiderich 1497114799 +0200 committer Mario Heiderich 1497114799 +0200 N/A C@)xtree 19b3a6e51e3ab4e4c2fa89e37bef234c15a558fd parent 9630ca6dfe410364e11f605566ef86b06fdba09e author Mario Heiderich 1497114428 +0200 committer Mario Heiderich 1497114428 +0200 Removed some code that is useless for useXHR=true J_Qxtree 0802f1700680a366238f5211dca58d6b4e676253 parent cdbb0167227a01601c92514d27ca76d1717106a0 author Mario Heiderich 1497114004 +0200 committer Mario Heiderich 1497114004 +0200 Wrapped useXHR code into try/catch BI@x tree 6392685453d02a49b2888238f83ef6e5bc9ae00e parent f7f55d032e64530f7386879320e30c64f1723a9b author Mario Heiderich 1497112965 +0200 committer Mario Heiderich 1497112965 +0200 Changed useXHR back to false VSGuxtree 91efd25df1dcf29a12fc76f11c85c0daf29ddd0f parent e2109692559abf285b8dd70f77d9386483892fb7 author Mario Heiderich 1497112757 +0200 committer Mario Heiderich 1497112757 +0200 Checking results for useXHR=true +rKx tree 8fd8bf07cd66f8f8c20a710144916b845e4a4c16 parent 2e73743b270a2ba17c8930fc52f309fc9897d4e1 author tdeekens 1496316413 +0200 committer Cure53 1496318612 +0200 Fix module name to DOMPurify from purify }Hxtree 1ae9a1d810429c2b7f779c5f32bd27025bbb6885 parent a720cae1e085439a9bb8d455770683d96bdefd24 author tdeekens 1496212487 +0200 committer Cure53 1496298501 +0200 Fix purify module.exports over export default Kxtree a8da7d34f28e064eb180b901e9ffa5906a153b9d parent 87c837e3912403513b686e39fe8b959c2df5e88f author tdeekens 1495709671 +0200 committer Cure53 1495711883 +0200 Fix using relative paths for setup \GUxtree b217f4b28d6a0655477f71f89c2ff5fcda82780f parent ade58749c32ffb62381352de7e28773f0eb19271 author tdeekens 1495709642 +0200 committer Cure53 1495711883 +0200 Move rollup karma config to karma setup Ixtree 8ccb30fa31bfd2b5f959950573f83d4d0e629764 parent 4b40bec7c388f0fd16c5b7211359e1b355f92c77 author tdeekens 1495709397 +0200 committer Cure53 1495711883 +0200 Update dependencies in yarn.lock pFtxtree fc32b51e77eff46809c9b5b678e4bbae04b9e438 parent 7ce5981483e86664d4ddf4b209960d8cdb8c11b7 author tdeekens 1495708247 +0200 committer Cure53 1495708454 +0200 Update test setup to use ESM E x tree c54ec64e1a67a044dd4608d3012411dda92190bc parent 3647d7f3c5e6460d20ea1ec084ebeed3177d359a author tdeekens 1495708209 +0200 committer Cure53 1495708454 +0200 Change file and preprocessor glob to match J"xtree e4796c80fd3ecfcf323239460077a158e7f12e49 parent c393fc068deab42c50cab34e303a9cde64b6eae4 author tdeekens 1495704781 +0200 committer Cure53 1495705096 +0200 Add new built libary version "Extree d91e1e7338a7949fc412c7da63a845fdb0bf78ca parent a844b63150a083dd588967396eeee616bf052af6 author tdeekens 1495704731 +0200 committer Cure53 1495705096 +0200 Change BS tests to run from node@6 Fxtree 9df3399bbf0b21cd5a8faf6ea4d51ffe784ceedd parent 7ad390ba88631868fe83662b485866cc953ac2ed author tdeekens 1495704674 +0200 committer Cure53 1495705096 +0200 Add cross-env and BABEL_ENV to setup Hxtree 2fdc4d487c9710f0bb20fced8b57f27a84f34ad7 parent 3427a0915ef1374f97dade10e83302eac8596de0 author Mario Heiderich 1495699381 +0200 committer Mario Heiderich 1495699381 +0200 Made some minor changes to README @GJÜxtree 2d4e5a56211a7f4520d30a7164e3aaf60e0078c1 parent c55c32a506dd6271d64af2f614fb38ed5751e974 author tdeekens 1495491631 +0200 committer Cure53 1495698475 +0200 Fix reference to webpack in readme Fxtree 569d3882a376f41f8077f3938ca56c145740634a parent 26b44a9e2f5365de7e7d83a03e8ce70fe392fa92 author tdeekens 1495269004 +0200 committer Cure53 1495698475 +0200 Rename amend build script for clarity GÐxtree 7ac7cbd736a1c63b66ce10a92164276de5f9ee8e parent 0d572c74726a0f476f332300dd3ddbf901cf5675 author tdeekens 1495268813 +0200 committer Cure53 1495698475 +0200 Add distribution files MC3xtree 947acfb0ba23b3cd4f031f5dfbc4cc265d7cc4a2 parent ed66b93d147239f8262670a34bab9694aff8b59f author tdeekens 1495268548 +0200 committer Cure53 1495698475 +0200 Add building in parallel }ADx tree d4d890b98677796380666f51dfe716194673c40f parent 57631289b154f57aa57f4ed7370839608576fdcc author tdeekens 1495268355 +0200 committer Cure53 1495698475 +0200 Refactor run scripts and env configuration I@xtree e109021da2e93f4b33a68e3df9446f66f3a2f5c9 parent 962b8dcc3d449dc2ed2eeb783feae3f5720a2774 author tdeekens 1495220461 +0200 committer Cure53 1495698475 +0200 Update travis install deps via yarn 2dHx tree aa5ed9dfbed485ad514b529b711c593c0fb583d1 parent 93ed1a88928ab1ef0968bbf91c3977348c909fb6 author tdeekens 1495220407 +0200 committer Cure53 1495698475 +0200 Update deps and karma tests to run on rollup KYxtree 946474cb2c2f53bee6496316fc7ddee51e525e92 parent 105fbe5d07a1c82d56e137fc843177e56dc31441 author tdeekens 1495217959 +0200 committer Cure53 1495698475 +0200 Update demos to consume dist build RG!xtree c55d8f0c37f17f9d9bd0502150c0c738b8f13ea4 parent afc0fe16e8623b43b08d6ebdb529237f8c89c58b author tdeekens 1495217655 +0200 committer Cure53 1495698475 +0200 Add reading version field dynamically Ixtree e79fb825907eb6bc6c89ab1b739d5e9ff57684f6 parent efc22d7fceebe1a8234dec66b9e532827c99b132 author tdeekens 1495217239 +0200 committer Cure53 1495698475 +0200 Remove minification script vEx tree d8f85e705a81d16b088f710c6eee4f7c47af7d69 parent dcc2ee934d8fdc164ac3a24af6fafb0c06eddaaa author tdeekens 1495216987 +0200 committer Cure53 1495698475 +0200 Replace webpack with rollup for building ;Kxtree 691d1cda974a32ff157bc26dd640cd9a6b67387a parent e46826134cd2751236c2092c391f28088b63ee4c author tdeekens 1495059677 +0200 committer Cure53 1495698475 +0200 Fix remaining lint issues from upstream/master FKxtree 4c8fa3a187ff5a0d2fdf4e574fd36fa88fe85d6e parent 0c33c07c732610c43a6bbe69c6cbe8672a7976f2 author tdeekens 1495059177 +0200 committer Cure53 1495698475 +0200 Add npm scripts section to readme gGўxtree 57121acc12401250a5aaaa204eb02f9d78da5c6c parent 6e2408edbe0abc38626843d107defa929dc58004 author tdeekens 1494883744 +0200 committer Cure53 1495698475 +0200 Rename creation of DOMPurity in test Gxtree db9ff352fce0017a37544cd096cac5f8b0c13f4f parent d741ef6193df2979297fc3d67477ea1a82120db8 author tdeekens 1489863264 +0100 committer Cure53 1495698475 +0200 Refactor to ES201* syntax and fix UMD reliance. cJxtree 868d0d1f2eefe4f4b513c02a1d55e6cf37e9277b parent 9ce10786e8b68c1f054d5ba47dd42f1adafff8a4 author tdeekens 1494797380 +0200 committer Cure53 1495698475 +0200 Add prettier and move eslint config Hxtree 38f0e5751f201819eb132d3b0f16f924a9633f98 parent aec8ab71fff144d6c49b4a00d2474e40edcf3c90 author tdeekens 1489866155 +0100 committer Cure53 1495698475 +0200 Fix amend-build.sh to respect new sourcemap file name. >Ngxtree 314e77d91f94f91e7c1d2a454510c00c18bc6b2e parent 3fcedee1eacaf71e54280f2fbe619f7c794bd8d4 author tdeekens 1489865957 +0100 committer Cure53 1495698475 +0200 Add window and document as globals to eslint. JuL!xtree de3c2681910307c8e9166d739162e1733cff4c72 parent c2ec907f29b38dded6e092676d30715dbf6eb04b author tdeekens 1489863874 +0100 committer Cure53 1495698475 +0200 Fix usage of hasOwnProperty to use Object.prototype. oMxtree ebb87122bbc1f31ce02d4afe26a5bb0185ee8d38 parent a8338af42c2beee74c1427fb74f9a117fe5ce02b author tdeekens 1489863794 +0100 committer Cure53 1495698475 +0200 Remove jshint add xo (eslint) to support ES201*. *LHx tree 7897899dc4f7aa1fbdaecafd4543fcd83ab2d9d7 parent 59ba59873d74348876c6c11fea1d9fb8057a5bd4 author tdeekens 1489863296 +0100 committer Cure53 1495698475 +0200 Change jsdom tests to consume built version. RL`xtree 3ef28b089a39c2ad80d4b78cca2938117a2510b1 parent c77d270350c06899b7caf91fc9b1c5a8f1e697e6 author tdeekens 1489863209 +0100 committer Cure53 1495698475 +0200 Fix libary name for umd build. <0EFxtree 82e56c23af88d9d05d9f2811721ada2693a14ed2 parent eaedaf6d7bca2bf3aa7e11e274f5cf7ae3a51494 author tdeekens 1489842939 +0100 committer Cure53 1495698475 +0200 Refactor package.json run scripts to integrate. Mxtree d48a03020f25178ff07091f0376f2cd115699961 parent 56f6526ce556a797106cc3ac9bbfd092a87140fd author tdeekens 1489842905 +0100 committer Cure53 1495698475 +0200 Add webpack config files for targets. cGx tree c082ca3c5d0a57d61f150048dd264939843cf4f8 parent 6835c184240b33e728821baada55f7056ebd0d9d author tdeekens 1489842836 +0100 committer Cure53 1495698475 +0200 Add .babelrc to configure browser targets. =Ixtree bdf90aec4f225049939a7c722a2e07ddbfcca609 parent 0352d542a8dd4a331cb8928088ceed60d1b3d720 author tdeekens 1489842811 +0100 committer Cure53 1495698475 +0200 Add .vscode to .gitignore. D"xtree 334f5f431d96ddc8132d50afd3771053943de2f7 parent affc42817d3742f71d998254f54574a8a2299c07 author Mario Heiderich 1495635358 +0200 committer Mario Heiderich 1495635358 +0200 See #206 Fixed test for Edge 15 GQxtree a9bb02352883eb1d2cc3ed6edc992076012d03b7 parent 381684fa72c78358af3f184afa438de90245ff9a author Mario Heiderich 1495570041 +0200 committer Mario Heiderich 1495570041 +0200 See #206 Fixed a typo z!Extree ab326e2243ef235d1e838caf7f340608ba385c24 parent 8d01c223591123a44ca62dc8b3cdf6ae592ace29 author Mario Heiderich 1495117284 +0200 committer Mario Heiderich 1495117284 +0200 Prepared 0.9.0 release Fx tree 52288f6df7dc182adeedf2c60cd77c4d48048ef7 parent db18f99c5f9a96c63c1b0fcc391046b5e04b2df2 author Mario Heiderich 1495116668 +0200 committer Mario Heiderich 1495116668 +0200 Prepared 0.9.0 release Fixed the broken FF mXSS check ɴQx9tree 798aea2c892527219621ea36a5947722e6f63903 parent 85ecd7036ecd85df93ca7195bc3c957e62e25ebd author Mario Heiderich 1495114578 +0200 committer Mario Heiderich 1495114578 +0200 Added better encoding to avoid DoS via UTF16 sequences Added try/catch for encoding or no encoding 1495114140 +0200 committer Mario Heiderich 1495114140 +0200 Added charset for Safari 10.1 XHR call Added escaping for the dirty HTML ;Uxtree 60cded1bb17281e3c6e3a51facd5e5fc47f9e66c parent e13c7a57dc7f851a264f5a45967434fd125bd3b5 author Mario Heiderich 1495113308 +0200 committer Mario Heiderich 1495113308 +0200 Same, further tests and optimizations ɞMӟxtree 9a7abdeabe44332b5a14905851ca5a99290dde6c parent c344ef74f35764df1a7174127c9af91bcd798bd9 author Mario Heiderich 1495113230 +0200 committer Mario Heiderich 1495113230 +0200 Refined the Safari 10.1 check to work better with NodeJS ? R}x+tree 7636951da187fb2ab4c24e86bc3dfd8b585c7561 parent 0823a6f8dfd713f25fa7a5ffb681fb0901bd7f12 author Mario Heiderich 1495112676 +0200 committer Mario Heiderich 1495112676 +0200 Added better test for Safari 10.1 uXSS presence Removed now unecessary DOM pollution ]+x|tree 53880dad40fe89fee815fdac776ae3c7d75115ed parent c9422367f42749c6c85e86b2a666868d4874cd1f author Mario Heiderich 1495111784 +0200 committer Mario Heiderich 1495111784 +0200 Added fixes for additional Safari 10.1 and Safari 10.2 XSS bugs Added alternative document creation via XHR for Safari 10.1+ Added feature test for Safari 10.1+ uXSS uxMtree 7f801c38cc4384aff214d1db277d3f95ab07eb88 parent 028f6086fbfbb2ce3b6cb3743726e4697a02f7f2 parent 5551d730463eca706ec12f13417db40489ddb5f4 author Cure53 1495008064 +0200 committer GitHub 1495008064 +0200 Merge pull request #213 from jfparadis/add-set-clear-config Option to set config onceex tree 7f801c38cc4384aff214d1db277d3f95ab07eb88 parent 028f6086fbfbb2ce3b6cb3743726e4697a02f7f2 author JF Paradis 1488354798 -0800 committer JF Paradis 1494727459 -0700 Option to set config once -Kxtree 1e90abf2f3abb0c3a39682ea90f2b16fc55f17e9 parent b9aa9372a31d0929de2b649613cff7197a9008c4 author Mario Heiderich 1493792445 +0200 committer Mario Heiderich 1493792445 +0200 Prepared 0.8.9 release cFvxEtree abfcc24b33aace70b57519b548526fc93e7049c2 parent f0bd5364c32e16fb6f02a47878e920f6c497d63e parent 134e7e84c3b714a7ebce8634a7df5bbfdaa8632f author Cure53 1493792238 +0200 committer GitHub 1493792238 +0200 Merge pull request #212 from neilj/domparser Fix broken test for useDOMParser`cߞxtree 33d336e082294f83693e3c7c58c7af4c625b55a9 parent da0e97ebd6e2ff68f01dcdc1dbe93c101e45b43f author Mario Heiderich 1493792090 +0200 committer Mario Heiderich 1493792090 +0200 Preparing 0.8.8 release I GNxntree 4c0b7439f9feaf7a018065079a1aa908cbfa171d parent da0e97ebd6e2ff68f01dcdc1dbe93c101e45b43f author Neil Jenkins 1493777935 +1000 committer Neil Jenkins 1493777935 +1000 Fix broken test for useDOMParser The logic was inverted, so this was broken in *both* the Safari and Firefox edge cases. Replace with a simpler test. yiv(xtree baca2830b496f1dae35fd113d056559e722524a4 parent 75e29e573bb4e6f16cef8a2737cbe1540f42fad6 author Mario Heiderich 1493106359 +0200 committer Mario Heiderich 1493106359 +0200 Preparing 0.8.7 release F֙xItree bd39cd68d37d4b25f77c69da93839b1dd9f7d3fe parent 0488aeb5a3413dc0cef1963bc34a0db33595eeb6 parent 8b036affb0ab18f3481368b655c80ffe835d8a2b author Cure53 1493036848 +0200 committer GitHub 1493036848 +0200 Merge pull request #210 from neilj/domparser Feature detect when to use DOMParseruexStree bd39cd68d37d4b25f77c69da93839b1dd9f7d3fe parent 0488aeb5a3413dc0cef1963bc34a0db33595eeb6 author Neil Jenkins 1493034982 +1000 committer Neil Jenkins 1493034982 +1000 Feature detect when to use DOMParser It's safer to feature detect where possible, which we can do for the Firefox bug but not for the Safari bug. So we default to not using DOMParser, unless we detect we need it. ]Κx*tree 25f9589c19bc9041a584eda3b5a208f2e814bfb5 parent 638c5d8ffbfb657d230cf31edbdc67e0640d23fd parent 5d771cafa67ca78fbbf78f322a9f070d79da61d8 author Cure53 1492950748 +0200 committer GitHub 1492950748 +0200 Merge pull request #209 from neilj/cleanup Cleanup.Zxtree 25f9589c19bc9041a584eda3b5a208f2e814bfb5 parent ef9deb158a0036f0d28da7abc1c169bc8aed95e3 parent 638c5d8ffbfb657d230cf31edbdc67e0640d23fd author Cure53 1492950738 +0200 committer GitHub 1492950738 +0200 Merge branch 'master' into cleanup7Uqx tree 602ac7c16e0f5649e5ccfb99a0298d9500169574 parent 59fd9a5713bc39217609bcb8e53ab60cc144aa86 author Mario Heiderich 1492950563 +0200 committer Mario Heiderich 1492950563 +0200 Added more verbose comments Hxtree a6f9542312dbb928eacaa0c1b3e86164af282ae5 parent acc7cb3423e0a8ee3d5d5980a2642068b85aff4c parent 59fd9a5713bc39217609bcb8e53ab60cc144aa86 author Cure53 1492950305 +0200 committer GitHub 1492950305 +0200 Merge branch 'master' into cleanup-TTxtree 9d45d068b7776ea697e71d0e86afbed18cb5862e parent 8730805ed6be77e023c689f730d4631121351200 author Mario Heiderich 1492950052 +0200 committer Mario Heiderich 1492950052 +0200 Added better Safari check based on DOM properties Ohxtree a7c401f0645e14926247f5f9ea081da132572dc5 parent c6459be5a5b51d29139198771e836805b6f27a8f author Neil Jenkins 1492932700 +1000 committer Neil Jenkins 1492932700 +1000 Fix typo in comment SEx tree f66b011241859e6d9b8dc416b659a7c7e9c6380f parent 6c58ce853bfba74f43132d347116b3becba65013 author Neil Jenkins 1492932676 +1000 committer Neil Jenkins 1492932676 +1000 Fix whitespace inconsistency Jxtree 2dd728db4277da4cbda0b807cbfaf9e6d797ce6e parent 8e35ebbd0bd7f73f56fd87ebce1f603e91655084 author Neil Jenkins 1492907276 +1000 committer Neil Jenkins 1492907276 +1000 Don't keep contents of