Commit Graph

Select branches

Hide Pull Requests

main

0.1

0.3

0.4

0.4.2

0.4.3

0.4.4

0.4.5

0.6.0

0.6.1

0.6.2

0.6.3

0.6.4

0.6.5

0.6.6

0.6.7

0.7.0

0.7.1

0.7.2

0.7.3

0.7.4

0.8.0

0.8.1

0.8.2

0.8.3

0.8.4

0.8.5

0.8.6

0.8.7

0.8.8

0.8.9

0.9.0

1.0.0

1.0.1

1.0.10

1.0.11

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

2.0.0

2.0.1

2.0.10

2.0.11

2.0.12

2.0.13

2.0.14

2.0.15

2.0.16

2.0.17

2.0.2

2.0.3

2.0.4

2.0.5

2.0.6

2.0.7

2.0.8

2.0.9

2.1.0

2.1.1

2.2.0

2.2.2

2.2.3

2.2.4

2.2.6

2.2.7

2.2.8

2.2.9

2.3.0

2.3.1

2.3.10

2.3.11

2.3.12

2.3.2

2.3.3

2.3.4

2.3.5

2.3.6

2.3.8

2.3.9

2.4.0

2.4.1

2.4.2

2.4.3

2.4.4

2.4.5

2.4.6

2.4.7

2.4.8

2.4.9

2.5.0

2.5.1

2.5.2

2.5.3

2.5.4

2.5.5

2.5.6

2.5.7

2.5.8

2.5.9

3.0.0

3.0.1

3.0.10

3.0.11

3.0.2

3.0.3

3.0.4

3.0.5

3.0.6

3.0.7

3.0.8

3.0.9

3.1.0

3.1.1

3.1.2

3.1.3

3.1.4

3.1.5

3.1.6

3.1.7

3.2.0

3.2.1

3.2.2

3.2.3

3.2.4

3.2.5

3.2.6

3.2.7

3.3.0

3.3.1

3.3.2

3.3.3

3.4.0

3.4.1

3.4.10

3.4.11

3.4.12

3.4.2

3.4.3

3.4.4

3.4.5

3.4.6

3.4.7

3.4.8

3.4.9

v0.3

Mono Color

• d989ea8182 Merge branch 'main' into cure53-basic-fuzzer Cure53andGitHub 2026-04-15 09:07:40 +03:00
• 83555aaaac test: Extended the fuzzer a bit to cover the config object Mario Heiderich 2026-04-15 08:04:34 +02:00
• d36835426b build(deps-dev): bump rollup-plugin-typescript2 from 0.36.0 to 0.37.0 (#1263) 4 people 2026-04-15 07:57:04 +02:00
• eb19478f31 build(deps-dev): bump @types/node from 16.18.126 to 25.6.0 (#1262) 4 people 2026-04-15 07:57:03 +02:00
• 9801a125e3 build(deps-dev): bump @rollup/plugin-babel from 6.1.0 to 7.0.0 (#1264) 3 people 2026-04-15 07:56:05 +02:00
• f24219adb6 test: added first scaffold for a simple data type and config fuzzer (#1259) Cure53andGitHub 2026-04-14 19:59:50 +03:00
• ce67e6fedf test: added first scaffold for a simple data type and config fuzzer Mario Heiderich 2026-04-14 18:40:27 +02:00
• d99774684f Update README.md (#1258) Cure53andGitHub 2026-04-14 17:57:30 +03:00
• 1bc61d3348 docs: updated list of contributors and fixed some outdated docs (#1257) Cure53andGitHub 2026-04-14 15:46:18 +03:00
• 1895443bf0 Update karma.custom-launchers.config.js (#1256) Cure53andGitHub 2026-04-14 15:24:13 +03:00
• 5d3ed3f129 test: added three more browsers to test array (OSX, mobile) Mario Heiderich 2026-04-14 14:13:02 +02:00
• d0758615cb test: added three more browsers to test setup (OSX, mobile) Mario Heiderich 2026-04-14 14:01:57 +02:00
• 44a6a18221 Update LICENSE (#1254) Cure53andGitHub 2026-04-14 13:28:18 +03:00
• 6290e4560b Getting 3.x branch ready for 3.4.0 release (#1250) 3.4.0 3 people 2026-04-14 09:54:45 +03:00
• d5ec549085 test: reverted to old BS config values as they worked better Mario Heiderich 2026-04-14 08:35:49 +02:00
• 51f5dc1f9e test: experimenting with new BS config to avoid the freezes test: removed two Safari versions as they might be the cause docs: updated version numbers for upcoming release Mario Heiderich 2026-04-14 08:26:53 +02:00
• d6541f202d test: carefully expanded array of tested BS browsers again Mario Heiderich 2026-04-14 08:14:15 +02:00
• 436446d952 build(deps): bump follow-redirects from 1.15.11 to 1.16.0 (#1249) 3 people 2026-04-14 07:53:02 +02:00
• 4b3f61dd62 build(deps-dev): bump rollup from 3.30.0 to 4.60.1 (#1246) 3 people 2026-04-14 07:48:32 +02:00
• 8e9be092ea build(deps-dev): bump eslint-config-prettier from 8.10.2 to 10.1.8 (#1244) 3 people 2026-04-14 07:48:16 +02:00
• 913d39b172 test: temporarily reduced browser test array to four main items :-( Mario Heiderich 2026-04-13 17:55:01 +02:00
• 2fd663e74a test: reducing BS browser array once more to get unstuck Mario Heiderich 2026-04-13 17:41:26 +02:00
• 8a6209d07e Fix mathML attributes (#1243) David OliverandGitHub 2026-04-13 15:08:10 +02:00
• 617b99f648 test: reduced number of tested browsers again to be at 24 Mario Heiderich 2026-04-13 12:28:39 +02:00
• 7c0db1f983 fix: prevent ADD_ATTR/ADD_TAGS function leaking into subsequent array-based calls (#1242) 1Jesper1andGitHub 2026-04-13 11:38:05 +02:00
• ea56074a17 fix: apply SAFE_FOR_TEMPLATES scrub in RETURN_DOM path (#1241) 3 people 2026-04-13 12:46:15 +07:00
• 8ae766065d Merge remote-tracking branch 'refs/remotes/origin/main' Mario Heiderich 2026-04-12 23:38:01 +03:00
• 21c3e22d53 test: removed nine really old browsers from karma tests Mario Heiderich 2026-04-12 23:36:24 +03:00
• da652d0aeb docs: update README.md badges Cure53andGitHub 2026-04-12 00:18:39 +03:00
• 004cf09543 docs: update build-and-test.yml name Cure53andGitHub 2026-04-11 23:01:53 +03:00
• 781e569780 docs: update README.md with OSF results Cure53andGitHub 2026-04-11 22:59:32 +03:00
• f79cf77c3b chore: update build-and-test.yml to get rid of a warning Cure53andGitHub 2026-04-11 22:54:32 +03:00
• 68a9908a88 fix: added osv-scanner.toml to ignore flagged deps Cure53andGitHub 2026-04-11 22:17:29 +03:00
• 5c262dc135 chore: Regenerated dist versions Mario Heiderich 2026-04-11 18:17:03 +03:00
• 72f78092da Added CONTRIBUTIONS.md Cure53andGitHub 2026-04-11 17:57:10 +03:00
• 9d564a61b5 build(deps): bump github/codeql-action from 3.35.1 to 4.35.1 (#1232) 3 people 2026-04-11 17:47:16 +03:00
• 3819316fe4 build(deps-dev): bump @babel/preset-env from 7.29.0 to 7.29.2 (#1233) 3 people 2026-04-11 17:47:05 +03:00
• 2e7e9cd605 build(deps): bump actions/checkout from 4.2.2 to 6.0.2 (#1234) 3 people 2026-04-11 17:46:55 +03:00
• e72bf757c3 build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.3 (#1235) 3 people 2026-04-11 17:46:46 +03:00
• d26aaa895d build(deps-dev): bump @rollup/plugin-node-resolve from 15.3.1 to 16.0.3 (#1236) 3 people 2026-04-11 17:46:27 +03:00
• 48e23910fd build(deps): bump actions/upload-artifact from 4.6.1 to 7.0.1 (#1237) 3 people 2026-04-11 17:46:17 +03:00
• 41b055dfa2 build(deps-dev): bump cross-env from 7.0.3 to 10.1.0 (#1238) 3 people 2026-04-11 17:45:48 +03:00
• fbf0740bc1 build(deps-dev): bump rollup-plugin-dts from 6.4.0 to 6.4.1 (#1239) 3 people 2026-04-11 17:45:41 +03:00
• 7d10e23b4e build(deps-dev): bump jsdom from 28.1.0 to 29.0.2 (#1240) 3 people 2026-04-11 17:45:29 +03:00
• 4d631b3ae0 [StepSecurity] Apply security best practices (#1231) StepSecurity BotandGitHub 2026-04-11 07:34:33 -07:00
• b318776305 Update build-and-test.yml Cure53andGitHub 2026-04-11 17:22:48 +03:00
• 205e182238 fix: FORBID_TAGS must win over ADD_TAGS function predicate (#1230) kodareef5andGitHub 2026-04-11 09:01:39 -04:00
• b5e9fedf9c Create scorecard.yml Cure53andGitHub 2026-04-11 13:52:51 +03:00
• 37b78f02c3 build(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 (#1225) 3 people 2026-04-11 13:31:11 +03:00
• f526d32124 build(deps): bump lodash from 4.17.23 to 4.18.1 (#1228) 3 people 2026-04-11 13:24:33 +03:00
• 41f12df74c build(deps-dev): bump serialize-javascript from 7.0.4 to 7.0.5 (#1223) 3 people 2026-03-31 11:31:25 +02:00
• cd22559dc5 Update README.md (#1222) Cure53andGitHub 2026-03-26 09:07:00 +01:00
• 9c21ec4576 fix: Removed Node 16 test target as it breaks Mario Heiderich 2026-03-26 09:02:14 +01:00
• 4876a8bd61 fix: Removed Node 26 test target again, not available yet Mario Heiderich 2026-03-26 08:59:08 +01:00
• 50205e7654 test: Expanded range of tested Node versions into both directions Mario Heiderich 2026-03-26 08:56:43 +01:00
• 78d7b39163 test: Testing whether the Browser Stack "latest" labels work Mario Heiderich 2026-03-26 08:52:17 +01:00
• 6e339936a0 Merge branch 'main' of github.com:cure53/DOMPurify Mario Heiderich 2026-03-26 08:41:33 +01:00
• fe34b88b5d test: Added more browser launchers to stay up-to-date Mario Heiderich 2026-03-26 08:40:52 +01:00
• a473efadfe build(deps-dev): bump flatted from 3.4.1 to 3.4.2 (#1218) 3 people 2026-03-21 21:52:00 +01:00
• 3acbe68ef8 build(deps-dev): bump undici from 7.23.0 to 7.24.1 (#1216) 3 people 2026-03-14 11:06:27 +01:00
• 3a251beb6a fix: Fixed a problem with the type defition patcher after Node version bump Mario Heiderich 2026-03-12 14:52:09 +01:00
• 19844bb6c8 build(deps): bump serialize-javascript and @rollup/plugin-terser (#1213) 3 people 2026-03-12 13:54:19 +01:00
• 46b1aedc2c build(deps): bump @tootallnate/once and jsdom (#1214) 3 people 2026-03-12 13:53:59 +01:00
• 05df14eb3b chore: Preparing 3.3.3 release 3.3.3 Mario Heiderich 2026-03-11 08:55:00 +01:00
• b82050e88a fix: engine requirement (#1210) RotzbuaandGitHub 2026-03-09 08:00:50 +01:00
• 1a26660875 Update README.md Cure53andGitHub 2026-03-05 14:23:40 +01:00
• 29cc80c20f chore: Updated minor version on demo website 2.5.9 Mario Heiderich 2026-03-05 12:40:21 +01:00
• 900265f5dd Getting 2.x branch ready for 2.5.9 release Mario Heiderich 2026-03-05 12:37:03 +01:00
• 6baccbb6ad Merge branch '2.x' of github.com:cure53/DOMPurify into 2.x Mario Heiderich 2026-03-05 12:31:13 +01:00
• f39f7e89ff fix: Added fixes for the jsdom parser issue in 2.x Mario Heiderich 2026-03-05 12:30:42 +01:00
• 62e9f2d4d8 Getting 3.x branch ready for 3.3.2 release (#1208) 3.3.2 4 people 2026-03-05 11:49:38 +01:00
• dd4a423f18 fix: Fixed the broken package-lock.json Mario Heiderich 2026-03-05 11:43:59 +01:00
• 728362abd4 Update package-lock.json Cure53andGitHub 2026-03-05 09:21:00 +01:00
• 5de2fda9e6 Merge branch 'main' of github.com:cure53/DOMPurify Mario Heiderich 2026-03-05 09:05:56 +01:00
• 5ff3fd1c05 fix: moved back from jsdom 28 to jsdom 20 Mario Heiderich 2026-03-05 08:57:55 +01:00
• db4b93a1c0 Getting 3.x branch ready for 3.3.2 releas (#1205) 4 people 2026-03-05 09:00:10 +01:00
• 0ee71133bd fix: moved back from jsdom 28 to jsdom 20 Mario Heiderich 2026-03-05 08:57:55 +01:00
• 83a7b8b47c chore: Preparing 3.3.2 release Mario Heiderich 2026-03-05 08:47:46 +01:00
• 6cc23629e1 build(deps): bump @tootallnate/once and jsdom (#1204) 3 people 2026-03-05 08:19:40 +01:00
• 2a53a59fbb fix: Expanded the regex ever so slightly to also cover script Mario Heiderich 2026-03-03 16:58:59 +01:00
• aae137bb5e Merge branch 'main' of github.com:cure53/DOMPurify Mario Heiderich 2026-03-03 14:43:50 +01:00
• 5eb95add61 fix: Adding a slightly tighter regex because of possible jsdom woes Mario Heiderich 2026-03-03 13:58:41 +01:00
• 7d946bb917 build(deps-dev): bump rollup from 3.29.5 to 3.30.0 (#1199) 3 people 2026-03-03 14:41:23 +01:00
• 2d8623e276 build(deps-dev): bump minimatch from 3.1.2 to 3.1.5 (#1200) 3 people 2026-03-03 14:41:12 +01:00
• 3aa2fcfb6e fix: Adding a slighjtly tighter regex because of possible jsdom woes Mario Heiderich 2026-03-03 13:58:41 +01:00
• e0d3ddf76f fix: Added smaller fixes addressing several LLM bug reports Mario Heiderich 2026-02-24 13:55:29 +01:00
• dc018f8bf3 build(deps): bump qs from 6.14.1 to 6.14.2 (#1196) 3 people 2026-02-13 10:48:23 +01:00
• bbc3dfe1d0 Update README.md Cure53andGitHub 2026-02-13 09:46:28 +01:00
• 113feb6a49 Update README.md Cure53andGitHub 2026-02-13 09:46:07 +01:00
• 29040ab495 build(deps-dev): bump webpack from 5.94.0 to 5.105.0 (#1194) 3 people 2026-02-13 09:43:38 +01:00
• 8b1a2604f5 Update README.md (#1195) Cure53andGitHub 2026-02-13 09:43:22 +01:00
• 9442e1b34b build(deps): bump lodash from 4.17.21 to 4.17.23 (#1193) 3 people 2026-01-22 11:26:29 +01:00
• 6a63c99e07 build(deps-dev): bump lodash-es from 4.17.21 to 4.17.23 (#1192) 3 people 2026-01-22 11:25:55 +01:00
• 7ca837fba5 remove dependency lodash.sample (#1191) RotzbuaandGitHub 2026-01-22 11:24:51 +01:00
• 9c1b33c1fe remove abandoned dependency npm-run-all (#1190) RotzbuaandGitHub 2026-01-22 11:24:32 +01:00
• 1b6efaccf2 fix: prettier windows end of line not lf (#1186) RotzbuaandGitHub 2026-01-13 11:12:46 +01:00
• 2aeabf496b fix: remove deprecated call QUnit.load() (#1188) RotzbuaandGitHub 2026-01-13 11:12:29 +01:00
• dd319f72d5 Revert "chore: update dependencies (#1183)" (#1184) Cure53andGitHub 2026-01-09 08:16:38 +01:00
• ae9777c195 chore: update dependencies (#1183) RotzbuaandGitHub 2026-01-09 08:08:55 +01:00
• 65b00726e3 chore: update tested nodejs version (#1181) RotzbuaandGitHub 2026-01-07 08:18:00 +01:00