Commit Graph

Select branches

Hide Pull Requests

main

0.1

0.3

0.4

0.4.2

0.4.3

0.4.4

0.4.5

0.6.0

0.6.1

0.6.2

0.6.3

0.6.4

0.6.5

0.6.6

0.6.7

0.7.0

0.7.1

0.7.2

0.7.3

0.7.4

0.8.0

0.8.1

0.8.2

0.8.3

0.8.4

0.8.5

0.8.6

0.8.7

0.8.8

0.8.9

0.9.0

1.0.0

1.0.1

1.0.10

1.0.11

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

2.0.0

2.0.1

2.0.10

2.0.11

2.0.12

2.0.13

2.0.14

2.0.15

2.0.16

2.0.17

2.0.2

2.0.3

2.0.4

2.0.5

2.0.6

2.0.7

2.0.8

2.0.9

2.1.0

2.1.1

2.2.0

2.2.2

2.2.3

2.2.4

2.2.6

2.2.7

2.2.8

2.2.9

2.3.0

2.3.1

2.3.10

2.3.11

2.3.12

2.3.2

2.3.3

2.3.4

2.3.5

2.3.6

2.3.8

2.3.9

2.4.0

2.4.1

2.4.2

2.4.3

2.4.4

2.4.5

2.4.6

2.4.7

2.4.8

2.4.9

2.5.0

2.5.1

2.5.2

2.5.3

2.5.4

2.5.5

2.5.6

2.5.7

2.5.8

2.5.9

3.0.0

3.0.1

3.0.10

3.0.11

3.0.2

3.0.3

3.0.4

3.0.5

3.0.6

3.0.7

3.0.8

3.0.9

3.1.0

3.1.1

3.1.2

3.1.3

3.1.4

3.1.5

3.1.6

3.1.7

3.2.0

3.2.1

3.2.2

3.2.3

3.2.4

3.2.5

3.2.6

3.2.7

3.3.0

3.3.1

3.3.2

3.3.3

3.4.0

3.4.1

3.4.10

3.4.11

3.4.12

3.4.2

3.4.3

3.4.4

3.4.5

3.4.6

3.4.7

3.4.8

3.4.9

v0.3

Mono Color

• 41b0251fe4 Delete upstream workflows main zeekay 2026-09-24 09:55:00 -07:00
• d097f75c2c ci: canonical pair — hanzo.yml + forge caller zeekayandHanzo Dev 2026-08-06 02:26:46 -07:00
• 0a707ecd2a fix: addressed a possible DoS with IN_PLACE and KEEP_CONTENT, thanks @n2duc (#1555) Cure53andGitHub 2026-07-29 15:53:35 +02:00
• 3f7440416e build(deps): bump the actions group with 6 updates (#1547) 3 people 2026-07-25 14:58:32 +02:00
• 1028e47af4 Update OSV-Scanner configuration with new ignored vulnerabilities (#1543) Cure53andGitHub 2026-07-22 13:10:03 +02:00
• b2a9b59a78 build(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 (#1542) 3 people 2026-07-22 12:27:41 +02:00
• 62233049e4 build(deps): bump the actions group with 5 updates (#1540) 3 people 2026-07-20 16:14:59 +02:00
• a2cda9fab6 release: 3.4.12 (#1537) 3.4.12 Cure53andGitHub 2026-07-11 13:55:00 +02:00
• f57b386c9c release: 3.4.12 (#1536) Cure53andGitHub 2026-07-11 13:45:45 +02:00
• 044b58b401 fix: addressed an issue with hook-handling for CE sanitization (#1527) Cure53andGitHub 2026-07-11 13:23:47 +02:00
• dc37bb1d02 build(deps): bump the actions group with 5 updates (#1529) 4 people 2026-07-11 13:01:58 +02:00
• 83bcf3eac7 Allow SVG dominant-baseline and text-orientation presentation attributes (#1526) 3 people 2026-07-11 19:45:59 +09:00
• 866f9bac28 Cure53 inplace hardening 2 (#1524) Cure53andGitHub 2026-07-09 21:03:01 +02:00
• c79bfe3272 Cure53 fix hook detach (#1523) Cure53andGitHub 2026-07-07 11:26:27 +02:00
• 03b4a15964 Cure53 proactive hardening against declarative partial updates (#1516) Cure53andGitHub 2026-07-07 10:18:08 +02:00
• acdd5c9361 build(deps): bump the actions group with 4 updates (#1518) 3 people 2026-07-04 13:19:09 +02:00
• 8e4692a6b4 build(deps): bump actions/attest-build-provenance in the actions group (#1513) 3 people 2026-06-27 16:09:36 +02:00
• f5cae2a6fd Update Snyk.io package health badge in README (#1511) Cure53andGitHub 2026-06-24 12:59:08 +02:00
• 0b3e2f8eec build(deps-dev): bump babel-plugin-istanbul from 5.2.0 to 8.0.0 (#1505) 4 people 2026-06-20 17:55:29 +02:00
• 23c91d51a6 build(deps-dev): bump rollup in the dev-dependencies group (#1504) 3 people 2026-06-20 17:49:58 +02:00
• 243fa386ee build(deps-dev): bump @types/node from 25.9.3 to 26.0.0 (#1499) 4 people 2026-06-19 13:42:49 +02:00
• 2e5816ccad build(deps-dev): bump undici from 7.25.0 to 7.28.0 (#1503) 4 people 2026-06-19 13:38:22 +02:00
• 4333c4ade8 build(deps-dev): bump the dev-dependencies group with 3 updates (#1498) 4 people 2026-06-19 13:32:21 +02:00
• c8b7339948 build(deps): bump actions/checkout in the actions group (#1497) 3 people 2026-06-19 13:27:55 +02:00
• afe5a26fb2 release: 3.4.11 (#1494) 3.4.11 Cure53andGitHub 2026-06-17 12:02:06 +02:00
• 8a565c0454 release: 3.4.11 (#1493) Cure53andGitHub 2026-06-17 11:23:04 +02:00
• 5c76e10187 chore: modified the packages.json again to get rid of vulnerable deps (#1491) Cure53andGitHub 2026-06-16 17:16:24 +02:00
• 143b927944 chore: added override for vulnerable dep to get rid of it (#1489) Cure53andGitHub 2026-06-16 16:40:02 +02:00
• 64ad312b2a chore: added override for vulnerable dep to get rid of it (#1487) Cure53andGitHub 2026-06-16 15:47:48 +02:00
• e12f66240a build(deps): bump uuid and nyc (#1485) 4 people 2026-06-16 14:57:45 +02:00
• 4c38b5ae55 build(deps): bump js-yaml and nyc (#1486) 3 people 2026-06-16 14:45:28 +02:00
• 0ff9c069a1 chore: updated several dependencies with sec issues (#1484) Cure53andGitHub 2026-06-16 14:38:39 +02:00
• c1815ac6e2 Fix links in SECURITY.md for threat model and attack class (#1483) Cure53andGitHub 2026-06-13 18:27:53 +02:00
• ae9f24044c fix: hook allowlist clone-guard now covers the setConfig() path (#1482) Cure53andGitHub 2026-06-13 17:14:36 +02:00
• b01107b03d release: 3.4.10 (#1478) 3.4.10 Cure53andGitHub 2026-06-12 13:56:26 +02:00
• 206da3d65b release: 3.4.10 (#1477) Cure53andGitHub 2026-06-12 13:49:52 +02:00
• adecaa0e37 chore: refactoring run pt4, demo touchup, docs, comments, small things (#1476) Cure53andGitHub 2026-06-12 12:41:53 +02:00
• 9ef570a0d4 chore: refactoring run pt3, performance, de-dos, micro optimizations (#1475) Cure53andGitHub 2026-06-12 12:11:53 +02:00
• b187055a13 chore: refactoring run pt2, methods, structure, more dedup (#1474) Cure53andGitHub 2026-06-12 11:07:51 +02:00
• 4112e9d87c chore: refactoring run pt1, types, typos and dedup (#1473) Cure53andGitHub 2026-06-11 23:58:45 +02:00
• 965398fae1 build(deps-dev): bump the dev-dependencies group with 3 updates (#1468) 4 people 2026-06-11 18:34:59 +02:00
• 83c269bbd8 Added osv-scanner.toml for the legacy Playwright (#1471) Cure53andGitHub 2026-06-11 18:22:40 +02:00
• eba6ab28fd build(deps): bump sigstore/gh-action-sigstore-python (#1467) 3 people 2026-06-11 18:11:52 +02:00
• 14e81720d6 Refactor dependabot.yml comments and update types (#1466) Cure53andGitHub 2026-06-11 18:06:57 +02:00
• 41a4847121 Update package description for DOMPurify (#1465) Cure53andGitHub 2026-06-11 17:31:30 +02:00
• 2ad7b62830 Cure53 test coverage (#1464) Cure53andGitHub 2026-06-11 16:49:27 +02:00
• da787c8990 Update README.md (#1463) Cure53andGitHub 2026-06-10 15:19:54 +02:00
• 67a116ab2a chore: fixed a missing pinned dependency (#1462) Cure53andGitHub 2026-06-10 15:11:31 +02:00
• e392489cdc test: added coverage tests for older browsers as well, added workflow (#1461) Cure53andGitHub 2026-06-10 13:01:13 +02:00
• 69b0dc6019 release: 3.4.9 (#1459) 3.4.9 Cure53andGitHub 2026-06-10 10:36:04 +02:00
• 4b6ab47f27 release: 3.4.9 (#1458) Cure53andGitHub 2026-06-10 10:27:20 +02:00
• 725b28ef90 Update contributor list in README.md (#1456) Cure53andGitHub 2026-06-06 19:56:31 +02:00
• e369a7d61b Enhance README with security usage details (#1454) Cure53andGitHub 2026-06-06 18:50:43 +02:00
• 52cb1f7c62 fix: added further robustness for exotic IN_PLACE usage (#1453) Cure53andGitHub 2026-06-06 18:08:49 +02:00
• 3c75b56e9b build(deps-dev): bump the dev-dependencies group across 1 directory with 3 updates (#1452) 4 people 2026-06-06 11:57:20 +02:00
• ff960dc9c8 build(deps): bump the actions group with 2 updates (#1445) 4 people 2026-06-06 11:52:15 +02:00
• 54c6c1bf2a fix: better handing of TT policy wipes & nodeName detection (#1443) Cure53andGitHub 2026-06-06 11:37:42 +02:00
• c45a35c730 Add Cloudback badge to README (#1440) Cure53andGitHub 2026-06-03 14:50:06 +02:00
• 50574f945e release: 3.4.8 (#1439) 3.4.8 Cure53andGitHub 2026-06-03 13:04:29 +02:00
• 609cdc3a9f release: 3.4.8 (#1438) Cure53andGitHub 2026-06-03 12:55:42 +02:00
• 6536011227 Change schedule to daily and modify job permissions (#1437) Cure53andGitHub 2026-06-02 11:23:53 +02:00
• 8bf9ff07fc chore: include LICENSE-MPL in published npm package (#1435) asamuzaK (Kazz)andGitHub 2026-06-01 23:40:06 +09:00
• 3f0cd779f3 Rename CONTRIBUTIONS.md to CONTRIBUTING.md (#1432) Cure53andGitHub 2026-05-31 11:50:30 +02:00
• e8919222dd build(deps-dev): bump the dev-dependencies group with 2 updates (#1425) 3 people 2026-05-30 12:15:18 +02:00
• 71b8d3c69f fix: addressed the types issues again (#1424) Cure53andGitHub 2026-05-29 17:44:49 +02:00
• 167c91118d see #1422 (#1423) Cure53andGitHub 2026-05-29 15:09:12 +02:00
• 3f2746566b Cure53 template scrub (#1421) Cure53andGitHub 2026-05-29 08:48:29 +02:00
• 751bd269e5 Cure53 cleanup root (#1418) Cure53andGitHub 2026-05-28 10:16:20 +02:00
• 9cb3ba021a Delete superfluous git file (#1417) Cure53andGitHub 2026-05-27 20:47:31 +02:00
• 2765c1d256 release: 3.4.7 (#1414) 3.4.7 Cure53andGitHub 2026-05-27 13:27:53 +02:00
• 90280b7772 release: 3.4.7 (#1413) Cure53andGitHub 2026-05-27 13:20:24 +02:00
• cb1e4f5ab5 Cure53 refactor testsuite (#1412) Cure53andGitHub 2026-05-27 13:05:05 +02:00
• 45b9090ad1 fix: made the handling on shadow roots and IN_PLACE more robust (#1409) Cure53andGitHub 2026-05-27 12:07:59 +02:00
• 94013a3109 build(deps-dev): bump the dev-dependencies group with 2 updates (#1401) 3 people 2026-05-26 21:36:51 +02:00
• d395eb982a Add Dependabot configuration for 2.x LTS branch (#1400) Cure53andGitHub 2026-05-26 21:20:59 +02:00
• 576f3ccc6c Update contributors list in README.md (#1397) Cure53andGitHub 2026-05-26 20:13:55 +02:00
• 119efb84d8 Spread ALLOWED_TAGS and ALLOWED_ATTR in hooks (#1396) Cure53andGitHub 2026-05-26 16:58:10 +02:00
• 6cf30ec65d release: 3.4.6 (#1394) 3.4.6 Cure53andGitHub 2026-05-26 12:36:30 +02:00
• 3cfa748aca release: 3.4.6 (#1393) Cure53andGitHub 2026-05-26 12:25:51 +02:00
• d9b84f4990 fix: added better protection against IN_PLACE clobbering (#1392) Cure53andGitHub 2026-05-26 12:00:11 +02:00
• 6ee53bdb97 fix: added more checks for clobbering when IN_PLACE is used (#1391) Cure53andGitHub 2026-05-24 21:48:43 +02:00
• c66033618f fix: fixed a possible DOM clobbering with IN_PLACE and shadow DOM (#1390) Cure53andGitHub 2026-05-24 15:54:56 +02:00
• 2982b4262c build(deps-dev): bump @types/node in the dev-dependencies group (#1388) 4 people 2026-05-24 12:54:07 +02:00
• 19b1f234f5 build(deps): bump the actions group with 2 updates (#1389) 3 people 2026-05-24 12:47:17 +02:00
• cc99719c3d Update osv-scanner.toml (#1387) Cure53andGitHub 2026-05-19 13:20:25 +03:00
• e6b6e8dae5 build(deps-dev): bump @types/node in the dev-dependencies group (#1386) 3 people 2026-05-19 12:15:37 +02:00
• d5a52b114f test: added tests for the recent <selectedcontent> bypass (#1384) Cure53andGitHub 2026-05-19 12:40:06 +03:00
• ca09e4367d release: 3.4.5 (#1382) 3.4.5 Cure53andGitHub 2026-05-18 10:37:07 +03:00
• ea2954869e release: 3.4.5 (#1381) Cure53andGitHub 2026-05-18 10:29:26 +03:00
• 4b488052b1 Update LICENSE (#1380) Cure53andGitHub 2026-05-17 18:31:54 +03:00
• f82ad34a90 Cure53 license patch 2 (#1379) Cure53andGitHub 2026-05-17 18:27:02 +03:00
• 208b9ff856 Update LICENSE (#1378) Cure53andGitHub 2026-05-17 18:06:41 +03:00
• dd56bfec3e Update LICENSE (#1377) Cure53andGitHub 2026-05-17 17:51:28 +03:00
• fc14e32e78 Update README.md (#1376) Cure53andGitHub 2026-05-17 17:39:54 +03:00
• b8991ba0a6 release: 3.4.4 (#1374) 3.4.4 Cure53andGitHub 2026-05-17 13:25:03 +03:00
• 7f069c16af release: 3.4.4 (#1373) Cure53andGitHub 2026-05-17 13:10:11 +03:00
• 93bd456d00 fix: attempting to add a stronger check for cross-realm windows (#1370) 3 people 2026-05-16 19:15:44 +03:00
• 88b9a0270b Update index.html (#1372) Cure53andGitHub 2026-05-16 19:06:12 +03:00
• 0001852a63 Update index.html (#1371) Cure53andGitHub 2026-05-16 17:55:13 +03:00
• b5f5527eb2 Update index.html (#1369) Cure53andGitHub 2026-05-16 00:07:58 +03:00