Commit Graph

Select branches

Hide Pull Requests

main

0.1

0.3

0.4

0.4.2

0.4.3

0.4.4

0.4.5

0.6.0

0.6.1

0.6.2

0.6.3

0.6.4

0.6.5

0.6.6

0.6.7

0.7.0

0.7.1

0.7.2

0.7.3

0.7.4

0.8.0

0.8.1

0.8.2

0.8.3

0.8.4

0.8.5

0.8.6

0.8.7

0.8.8

0.8.9

0.9.0

1.0.0

1.0.1

1.0.10

1.0.11

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

2.0.0

2.0.1

2.0.10

2.0.11

2.0.12

2.0.13

2.0.14

2.0.15

2.0.16

2.0.17

2.0.2

2.0.3

2.0.4

2.0.5

2.0.6

2.0.7

2.0.8

2.0.9

2.1.0

2.1.1

2.2.0

2.2.2

2.2.3

2.2.4

2.2.6

2.2.7

2.2.8

2.2.9

2.3.0

2.3.1

2.3.10

2.3.11

2.3.12

2.3.2

2.3.3

2.3.4

2.3.5

2.3.6

2.3.8

2.3.9

2.4.0

2.4.1

2.4.2

2.4.3

2.4.4

2.4.5

2.4.6

2.4.7

2.4.8

2.4.9

2.5.0

2.5.1

2.5.2

2.5.3

2.5.4

2.5.5

2.5.6

2.5.7

2.5.8

2.5.9

3.0.0

3.0.1

3.0.10

3.0.11

3.0.2

3.0.3

3.0.4

3.0.5

3.0.6

3.0.7

3.0.8

3.0.9

3.1.0

3.1.1

3.1.2

3.1.3

3.1.4

3.1.5

3.1.6

3.1.7

3.2.0

3.2.1

3.2.2

3.2.3

3.2.4

3.2.5

3.2.6

3.2.7

3.3.0

3.3.1

3.3.2

3.3.3

3.4.0

3.4.1

3.4.10

3.4.11

3.4.12

3.4.2

3.4.3

3.4.4

3.4.5

3.4.6

3.4.7

3.4.8

3.4.9

v0.3

Mono Color

• c1ea77e74c Added type annotations to the public interface so that type declarations can be generated. reduckted 2024-10-12 21:21:32 +10:00
• aa19cc4161 Added type annotations to utils. reduckted 2024-10-09 21:36:44 +10:00
• 348826072b Defines types for the config. reduckted 2024-10-11 21:25:19 +10:00
• 617f651218 Configure rollup to process TypeScript. reduckted 2024-10-09 21:08:36 +10:00
• 2ddd1a8051 Disabled some lint rules. reduckted 2024-10-16 20:49:40 +10:00
• bf2149befc Rename .js files to .ts. reduckted 2024-10-09 21:08:18 +10:00
• 0f19d4d8b8 Add TypeScript config. reduckted 2024-10-09 20:54:04 +10:00
• c51f807652 see #1022 Mario Heiderich 2024-10-11 09:57:47 +02:00
• 445c074b3c Merge pull request #1004 from cure53/dependabot/npm_and_yarn/multi-82ad408bf4 Cure53andGitHub 2024-10-11 09:24:49 +02:00
• fa17c3de3e build(deps): bump cookie and socket.io dependabot[bot]andGitHub 2024-10-10 14:21:37 +00:00
• eba8295ea5 fix: Changed the order of attribute checks for safer hooks handling Mario Heiderich 2024-10-09 10:58:25 +02:00
• cc8796d0a5 Merge pull request #999 from cure53/main 3.1.7 Cure53andGitHub 2024-09-26 13:07:13 +02:00
• 8849771b1f chore: Regenerated source maps Mario Heiderich 2024-09-26 13:02:53 +02:00
• 4c5000ca6c Merge pull request #998 from cure53/main Cure53andGitHub 2024-09-26 12:27:22 +02:00
• fca087a86d chore: Preparing 2.5.7 release 2.5.7 Mario Heiderich 2024-09-26 12:18:18 +02:00
• 597b5fb2c6 chore: Preparing 3.1.7 release Mario Heiderich 2024-09-26 12:11:19 +02:00
• 9ceb3d4125 fix: Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @masatokinugawa fix: Removed the foreeignObject element from the lost of HTML entrypoints, thanks @masatokinugawa chore: Updated build and test dependencies Mario Heiderich 2024-09-26 12:03:38 +02:00
• 2786cc5229 Merge pull request #993 from cure53/dependabot/npm_and_yarn/body-parser-1.20.3 Cure53andGitHub 2024-09-17 13:11:16 +02:00
• 458855b205 build(deps): bump body-parser from 1.20.1 to 1.20.3 dependabot[bot]andGitHub 2024-09-16 20:53:46 +00:00
• 58d0c08c47 Merge pull request #990 from jeroen1602/angular_support Cure53andGitHub 2024-09-05 08:33:52 +02:00
• 423fc6495c Added support for the Angular compiler. Jeroen 2024-09-03 15:27:18 +02:00
• aac7df1a57 Merge pull request #989 from cure53/dependabot/npm_and_yarn/webpack-5.94.0 Cure53andGitHub 2024-09-03 15:16:15 +02:00
• d3e14d2d9b build(deps-dev): bump webpack from 5.76.1 to 5.94.0 dependabot[bot]andGitHub 2024-08-30 10:53:06 +00:00
• 637cfe3176 Merge pull request #987 from Gigabyte5671/svg-fefunc-attributes Cure53andGitHub 2024-08-20 13:51:12 +02:00
• 27c6e534c5 Add SVG transfer function attributes to allow list Giga 2024-08-20 22:50:25 +12:00
• 2944bfaef0 Merge pull request #983 from christianhg/patch-1 Cure53andGitHub 2024-07-19 15:39:27 +02:00
• 615bc950f5 fix: typo in karma.custom-launchers.config.js Christian GrøngaardandGitHub 2024-07-16 11:01:02 +02:00
• 0adc8ee695 Merge pull request #978 from cure53/main 3.1.6 Cure53andGitHub 2024-07-05 12:30:51 +02:00
• c92e9596a2 fix: Fixed a typo on the README Mario Heiderich 2024-07-05 12:15:17 +02:00
• 003a5a8f42 chore: Preparing 2.5.6 release 2.5.6 Mario Heiderich 2024-07-05 12:12:03 +02:00
• 8fc1a7f13c chore: Preparing 3.1.6 release Mario Heiderich 2024-07-05 09:51:38 +02:00
• 76f9fdb541 fix: Made sure that remove() is not called directly from node Mario Heiderich 2024-07-04 19:32:40 +02:00
• e823c50bd5 fix: Fixed a DOM clobbering issue leading to an error being thrown Mario Heiderich 2024-07-04 16:10:11 +02:00
• e6b2361bd3 Merge pull request #977 from cure53/dependabot/npm_and_yarn/multi-99ca4f73d8 Cure53andGitHub 2024-07-02 09:24:44 +02:00
• cf237d9685 build(deps): bump ws and socket.io-adapter dependabot[bot]andGitHub 2024-07-02 07:07:47 +00:00
• 69512cf677 docs: Added better security warning about SAFE_FOR_XML to README Mario Heiderich 2024-06-25 15:17:11 +02:00
• a195c953c2 fix: Added changes to 2.x regarding attribute value checks Mario Heiderich 2024-06-25 14:55:33 +02:00
• 8070a8d8fd fix: Changed the order for attribute checks slightly for safer hooks Mario Heiderich 2024-06-25 13:50:04 +02:00
• 6e1e892601 Merge pull request #975 from cure53/dependabot/npm_and_yarn/multi-2d3aef8690 Cure53andGitHub 2024-06-20 12:43:40 +02:00
• 6d9fb36238 Merge pull request #974 from Rotzbua/feat_website_lang Cure53andGitHub 2024-06-20 12:42:29 +02:00
• 72c3e14294 Merge pull request #973 from Rotzbua/fix_typos Cure53andGitHub 2024-06-20 12:41:03 +02:00
• 36841a5997 build(deps): bump ws and socket.io dependabot[bot]andGitHub 2024-06-20 10:40:07 +00:00
• 194275a665 Merge pull request #972 from Rotzbua/feat_docs_removed_options Cure53andGitHub 2024-06-20 12:39:33 +02:00
• 3b79657b40 Merge pull request #970 from cure53/dependabot/npm_and_yarn/braces-3.0.3 Cure53andGitHub 2024-06-20 12:38:48 +02:00
• 437d76eb96 fix(typo): found by codespell Rotzbua 2024-06-18 01:03:39 +02:00
• 8bc1ad9ea3 feat(website): add lang attribute to declare language Rotzbua 2024-06-18 00:59:00 +02:00
• 5e1eaec058 feat(docs): add removed options Rotzbua 2024-06-18 00:54:29 +02:00
• 3472d98c3f build(deps): bump braces from 3.0.2 to 3.0.3 dependabot[bot]andGitHub 2024-06-16 16:35:22 +00:00
• 9fc6d3ca83 See #961 Mario Heiderich 2024-06-10 08:19:52 +02:00
• 24a03a492b Merge pull request #964 from cure53/main 3.1.5 Cure53andGitHub 2024-05-31 11:04:49 +02:00
• 87e9422327 chore: Preparing 3.1.5 release Mario Heiderich 2024-05-31 10:52:18 +02:00
• 70dd2b2d8f chore: Preparing 2.5.5 release 2.5.5 Mario Heiderich 2024-05-31 10:36:39 +02:00
• 6991c91ba9 chore: Also removed depth counter logic from 2.x branch for now Mario Heiderich 2024-05-27 11:54:22 +02:00
• 2545223527 chore: Experimentally removing the depth counter logic as we have better defenses now Mario Heiderich 2024-05-27 11:28:52 +02:00
• 6f5f87b82f see #961 Mario Heiderich 2024-05-23 08:03:42 +02:00
• d29d5d7f2d Merge pull request #960 from cure53/main 3.1.4 Cure53andGitHub 2024-05-20 13:11:10 +02:00
• bed3fa1a72 docs: Updated README ever so slightly chore: Added newest builds 2.5.4 Mario Heiderich 2024-05-19 13:41:56 +02:00
• 2806f3b8f1 chore: Preparing 3.1.4 release Mario Heiderich 2024-05-19 13:39:32 +02:00
• bf6d15625a test: Fixed two more tests for MSIE11 and Edge 18 test: Added more browsers to test array for 2.x branch Mario Heiderich 2024-05-19 12:00:17 +02:00
• eec9eb2159 test: Fixed more tests for MSIE and Edge 18 Mario Heiderich 2024-05-19 11:51:27 +02:00
• 62e7faa5b3 test: Fixed several new tests for MSIE11 and Edge 18 Mario Heiderich 2024-05-19 11:45:54 +02:00
• e1ef733c26 test: Changed github config to include MSIE tests for 2.x Mario Heiderich 2024-05-18 18:39:07 +02:00
• 8ccbc42d85 test: Experimentally changed TEST_PROBE_ONLY to not cover 2.x Mario Heiderich 2024-05-18 18:29:07 +02:00
• 79c000714b chore: Preparing 2.5.4 release Mario Heiderich 2024-05-18 17:25:59 +02:00
• 273e17d791 fix: Added MSIE number check fix to main as well test: Experimentally added 2.x to branches for BS test on Mario Heiderich 2024-05-18 17:19:32 +02:00
• 800dc7ced0 fix: Added a better for for the MSIE iNaN issue test: Added broader test support for newer Node versions to 2.x Mario Heiderich 2024-05-18 17:12:05 +02:00
• 3d13344f59 test: Attempting to get MSIE 11 back into the browser test array Mario Heiderich 2024-05-18 16:46:41 +02:00
• 40bfee4eee fix: Fixed an issue with MSIE and no support for Number.isNaN Mario Heiderich 2024-05-18 16:39:01 +02:00
• 52a58877b5 Merge pull request #957 from Gigabyte5671/popover-api Cure53andGitHub 2024-05-18 11:48:52 +02:00
• 8ed346e28f Merge pull request #956 from MortenHofft/patch-1 Cure53andGitHub 2024-05-18 11:48:05 +02:00
• eedd6d287d Add popover attributes to allow list Giga 2024-05-18 10:58:07 +12:00
• f3aeb3dd60 documentation Morten HøfftandGitHub 2024-05-15 15:31:59 +02:00
• 15b3094ef6 Merge branch '2.x' of github.com:cure53/DOMPurify into 2.x 2.5.3 Mario Heiderich 2024-05-11 12:17:55 +02:00
• 2de30daa33 fix: Merged prototype pollution check into 2.x Mario Heiderich 2024-05-11 12:17:14 +02:00
• 0007ff6087 chore: Preparing 3.1.3 release 3.1.3 Mario Heiderich 2024-05-11 12:01:24 +02:00
• 49445777f3 docs: Updated README.md with right version number Cure53andGitHub 2024-05-11 11:59:49 +02:00
• e0bdec5c89 chore: chore: Preparing 2.5.3 release Mario Heiderich 2024-05-11 11:55:32 +02:00
• 994c49c071 chore: Getting 2.x branch up to date with main Mario Heiderich 2024-05-10 19:15:42 +02:00
• 2f842ce5ac fix: Added smaller-than-null check for __depth hardening code Mario Heiderich 2024-05-08 14:47:46 +02:00
• c165d182f3 fix: Hardened the depth tracking code against prototype pollution Mario Heiderich 2024-05-08 13:47:27 +02:00
• f24cc0c544 fix: Made the regex for comment scrubbing a bit stricter Mario Heiderich 2024-05-07 19:19:01 +02:00
• d5aab1c074 fix: Expanded the comment scrubbing regex matching a bit further Mario Heiderich 2024-05-07 15:08:13 +02:00
• 118b730185 fix: Added better configurability for new comment behavior Mario Heiderich 2024-05-07 12:06:10 +02:00
• c6d2d68bf6 fix: Added better configurability for new comment behavior Mario Heiderich 2024-05-07 12:06:10 +02:00
• 83ef715339 chore: Getting 2.x branch up to date with main Mario Heiderich 2024-05-05 17:14:21 +02:00
• 16bd84423a docs: Changed inline comments slightly to be more accurate Mario Heiderich 2024-05-05 16:51:57 +02:00
• a57da74d22 test: Fixed the tests Dr.-Ing. Mario Heiderich 2024-05-05 14:13:09 +02:00
• ebf986d615 fix: Added experiemental comment scrubbing inside attributes Dr.-Ing. Mario Heiderich 2024-05-05 14:08:06 +02:00
• d2a4295605 fix #949 Dr.-Ing. Mario Heiderich 2024-05-05 13:37:05 +02:00
• 91ebf77a12 Merge pull request #948 from ssi02014/refac/purify Cure53andGitHub 2024-05-05 13:31:51 +02:00
• b9d931b91d refac: refactoring nodeType by adding a NODE_TYPE object ssi02014 2024-05-03 23:09:06 +09:00
• f139b089a8 fix: Added experimental change to prohibit __depth clobbering Dr.-Ing. Mario Heiderich 2024-05-03 14:34:08 +02:00
• 0b6804733b Merge branch 'main' of github.com:cure53/DOMPurify Mario Heiderich 2024-05-03 11:41:47 +02:00
• 940034c0a2 fix: Added experimental clobbering check after removal Mario Heiderich 2024-05-03 11:40:58 +02:00
• 34be9b38a5 Update README.md with latest shout outs Cure53andGitHub 2024-05-01 11:02:48 +02:00
• 3fc63095f9 Merge pull request #945 from cure53/main 3.1.2 Cure53andGitHub 2024-04-30 10:07:15 +02:00
• bcbdb5121a chore: Updated package-lock.json with new release number Mario Heiderich 2024-04-30 09:55:59 +02:00
• 1688b81e20 chore: Preparing 2.5.2 release 2.5.2 Mario Heiderich 2024-04-30 09:51:41 +02:00
• f69ee89975 chore: Preparing 3.1.2 release Mario Heiderich 2024-04-30 09:44:16 +02:00
• 1cf37cb9fd test: Fixed the tests for older Chrome and Safari Mario Heiderich 2024-04-30 09:34:05 +02:00