cure53/DOMPurify issues and pull requests

#1063 - Cannot find type definition file for 'dompurify'

Issue - State: closed - Opened by whoisahmed about 15 hours ago - 5 comments

#1062 - Getting 3.x branch ready for 3.2.4 release

Pull Request - State: closed - Opened by cure53 19 days ago

#1061 - Does DOMPurify support Jquery by default?

Issue - State: closed - Opened by fmigliorato 25 days ago - 3 comments

#1060 - tests: DOMPurify custom window test improvement

Pull Request - State: closed - Opened by yehuya 27 days ago - 1 comment

#1059 - fix: handle undefined Element in DOMPurify initialization

Pull Request - State: closed - Opened by yehuya 27 days ago - 1 comment

#1058 - <use> is missing in the svg tags

Issue - State: closed - Opened by rnike about 1 month ago - 2 comments

#1057 - Target Attribute is Removed When ALLOWED_URI_REGEXP is Enabled

Issue - State: closed - Opened by MyeonginNoah about 1 month ago - 4 comments

#1056 - 2.x

Pull Request - State: closed - Opened by cure53 about 2 months ago

#1055 - Update LICENSE, fix copyright license year

Pull Request - State: closed - Opened by JasonnnW3000 about 2 months ago

#1054 - feat: allow specifying a hook with `removeHook()`

Pull Request - State: closed - Opened by davecardwell about 2 months ago - 1 comment

#1053 - chore(package.json): add `purify.js` and `purify.min.js` to exports as targetable modules

Pull Request - State: closed - Opened by Aetherinox about 2 months ago - 1 comment

#1052 - Using exported name 'DOMPurify' as identifier for default import

Issue - State: closed - Opened by ScorpAL 2 months ago - 6 comments

#1051 - Unable to allow XML namespaced tags in SVG

Issue - State: closed - Opened by Ampflower 2 months ago - 9 comments

#1050 - Request: Add purify.min.js and purify.js to package.json exports

Issue - State: closed - Opened by Aetherinox 2 months ago - 7 comments

#1049 - build(deps): bump GabrielBB/xvfb-action from 1.6 to 1.7

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies, github_actions

#1048 - 3.x

Pull Request - State: closed - Opened by cure53 2 months ago

#1047 - chore: Preparing 3.2.3 release

Pull Request - State: closed - Opened by cure53 2 months ago

#1046 - 2.x

Pull Request - State: closed - Opened by cure53 2 months ago

#1045 - Getting 3.x branch ready for 3.2.3 release

Pull Request - State: closed - Opened by cure53 2 months ago

#1044 - Radme

Issue - State: closed - Opened by Vapercut 3 months ago

#1043 - Me

Issue - State: closed - Opened by Vapercut 3 months ago

#1042 - [feature] Is it possible to remove the version information in the DOMPurify license?

Issue - State: closed - Opened by camelmasa 3 months ago - 2 comments

#1041 - Removed redundant comment

Pull Request - State: closed - Opened by CoryHrycko 3 months ago - 1 comment

#1040 - HTML DOM inside ForeignObject in SVG subtree removed with version 3.2.2

Issue - State: closed - Opened by alderg 3 months ago - 2 comments

#1039 - 3.x

Pull Request - State: closed - Opened by cure53 3 months ago

#1038 - Getting 3.x branch ready for 3.2.2 release

Pull Request - State: closed - Opened by cure53 3 months ago

#1037 - Fix #1033

Pull Request - State: closed - Opened by svdb99 3 months ago - 10 comments

#1036 - Add triple-slash types reference to trusted-types.

Pull Request - State: closed - Opened by reduckted 3 months ago - 1 comment

#1035 - Compile of Angular app not possible since update to v3.2.x

Issue - State: closed - Opened by heinerlamprecht 3 months ago - 12 comments

#1034 - export 'sanitize' (imported as 'sanitize') was not found in 'dompurify' (possible exports: default)

Issue - State: closed - Opened by ngtrthinh169TPC 3 months ago - 7 comments

#1033 - Small syntax enhancement to TMPLIT_EXPR

Issue - State: closed - Opened by svdb99 3 months ago - 11 comments

#1032 - 2.x

Pull Request - State: closed - Opened by cure53 3 months ago

#1031 - Changed the type of the "node" in hooks to be as specific as possible

Pull Request - State: closed - Opened by reduckted 3 months ago - 1 comment

#1030 - Getting 3.x branch ready for 3.2.1 release

Pull Request - State: closed - Opened by cure53 3 months ago

#1029 - Incorrect type for addHook callback currentNode argument

Issue - State: closed - Opened by benjdevries 3 months ago - 8 comments

#1028 - fix: mark createDOMPurify param as optional

Pull Request - State: closed - Opened by MiniDigger 3 months ago

#1027 - Endless loop of `DOMParser.parseFromString` when used with Trusted Types polyfill

Issue - State: closed - Opened by orazioedoardo 3 months ago - 4 comments

#1026 - [feature] request: add `isDirty()` or similar method to determine code cleanliness

Issue - State: closed - Opened by tonypapousek 3 months ago - 3 comments

#1025 - Move @types/trusted-types to optionalDependencies

Pull Request - State: closed - Opened by asamuzaK 3 months ago - 1 comment

#1024 - Ensured that purify.min.js is actually minified.

Pull Request - State: closed - Opened by reduckted 3 months ago - 1 comment

#1023 - Moved the "import" exports to be first

Pull Request - State: closed - Opened by reduckted 3 months ago - 1 comment

#1022 - fix: ignore export assign cannot be used in module TS error, fixes #1018

Pull Request - State: closed - Opened by ghiscoding 3 months ago - 3 comments

#1021 - Export DOMPurify interface

Pull Request - State: closed - Opened by asamuzaK 3 months ago - 2 comments

#1020 - `type DOMPurify` is not exported

Issue - State: closed - Opened by asamuzaK 3 months ago - 2 comments

#1019 - Update CUSTOM_ELEMENT regexp to support custom elements with colon into the tag.

Pull Request - State: closed - Opened by ciccio-90 3 months ago - 7 comments

#1018 - 3.2.0 seems to cause a build error in Angular/React: An export assignment cannot be used in a module with other exported elements.

Issue - State: closed - Opened by ghiscoding 3 months ago - 19 comments

#1016 - 3.x

Pull Request - State: closed - Opened by cure53 3 months ago

#1015 - Getting 3.x branch ready for 3.2.0 release

Pull Request - State: closed - Opened by cure53 3 months ago

#1014 - imp: improved types and utils

Pull Request - State: closed - Opened by ssi02014 3 months ago - 5 comments

#1013 - nextjs SSR error

Issue - State: closed - Opened by shehza-d 3 months ago - 2 comments

#1012 - how to keep (sub)strong tags included in a deleted(unwanted) span tag ?

Issue - State: closed - Opened by fabGutin 4 months ago - 1 comment

#1011 - Maintaining the order of the attributes in sanitized html.

Pull Request - State: closed - Opened by parveshgoyal01 4 months ago - 1 comment

#1010 - The order of the attributes is not maintained, so there is no way to check and say that content is valid as per DOMPurify.

Issue - State: closed - Opened by parveshgoyal01 4 months ago - 2 comments

#1009 - errors when imported via requirejs/define

Issue - State: closed - Opened by kevindoyleie 4 months ago - 1 comment

#1008 - fix(types): export `Config` type from package

Pull Request - State: closed - Opened by aloisklink 4 months ago - 1 comment

#1007 - Issue regarding sanitization behavior

Issue - State: closed - Opened by DeepakGoyalDev 4 months ago - 3 comments

#1006 - Add Type Declarations

Pull Request - State: closed - Opened by reduckted 4 months ago - 1 comment

#1005 - `Illegal invocation` thrown when removing/replacing comment node in hook

Issue - State: closed - Opened by mjbvz 4 months ago - 6 comments

#1004 - build(deps): bump cookie and socket.io

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, javascript

#1003 - [bug] Version 3.1.7 build error for Angular (likely other projects)

Issue - State: closed - Opened by philmayfield 5 months ago - 32 comments

#1002 - DOMPurify 3.1.7 breaks Mermaid diagrams using `foreignObject`

Issue - State: closed - Opened by slorber 5 months ago - 9 comments

#1001 - 3.x

Pull Request - State: closed - Opened by cure53 5 months ago

#1000 - 2.x

Pull Request - State: closed - Opened by cure53 5 months ago

#999 - Getting 3.x branch ready for 3.1.7 release 2/2

Pull Request - State: closed - Opened by cure53 5 months ago

#998 - Getting 3.x branch ready for 3.1.7 release

Pull Request - State: closed - Opened by cure53 5 months ago

#997 - build(deps-dev): bump rollup from 2.70.1 to 3.29.5

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, javascript

#995 - &para gets transformed to ¶

Issue - State: closed - Opened by kaelig 5 months ago - 9 comments

#994 - DOMpurify allows tampering by prototype pollution

Issue - State: closed - Opened by Codename-404 5 months ago - 1 comment

#993 - build(deps): bump body-parser from 1.20.1 to 1.20.3

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, javascript

#992 - XML code is removed

Issue - State: closed - Opened by BekaArabidze98 5 months ago - 4 comments

#991 - The DOMPurify.removed does not work as expected

Issue - State: closed - Opened by Asish-Work 5 months ago - 1 comment

#990 - Added support for the Angular compiler.

Pull Request - State: closed - Opened by jeroen1602 6 months ago - 2 comments

#988 - DOMPurify.removed isn't reporting inline scripts with arbitrary text afterwards

Issue - State: closed - Opened by Bengejd 6 months ago - 2 comments

#987 - Allow SVG transfer function attributes

Pull Request - State: closed - Opened by Gigabyte5671 6 months ago - 1 comment

#986 - DOMPurify.sanitize() leaves executable code

Issue - State: closed - Opened by pdelancie 6 months ago - 13 comments

#985 - [bug] DomPurify hangs on indefinitely when using SAFE_FOR_TEMPLATES=true

Issue - State: closed - Opened by vicpara 6 months ago - 3 comments

#984 - Incorrect remove of `feFunc*` attr

Issue - State: closed - Opened by RichardLuo0 6 months ago

#983 - fix: typo in karma.custom-launchers.config.js

Pull Request - State: closed - Opened by christianhg 7 months ago - 1 comment

#982 - DOM Purify Allows onfocus events

Issue - State: closed - Opened by agonvuniqi 7 months ago - 1 comment

#980 - name='lang' Attribute Removed During Sanitization

Issue - State: closed - Opened by nitiponth 7 months ago - 1 comment

#979 - Policy creator

Issue - State: closed - Opened by jmanico 8 months ago - 2 comments

#978 - Getting 3.x branch ready for 3.1.6 release

Pull Request - State: closed - Opened by cure53 8 months ago

#977 - build(deps): bump ws and socket.io-adapter

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago
Labels: dependencies, javascript

#976 - MathML Content Markup Removed

Issue - State: closed - Opened by HaluanUskoa 8 months ago - 2 comments

#975 - build(deps): bump ws and socket.io

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago
Labels: dependencies, javascript

#974 - feat(website): add lang attribute to declare language

Pull Request - State: closed - Opened by Rotzbua 8 months ago - 1 comment

#973 - fix(typo): found by `codespell`

Pull Request - State: closed - Opened by Rotzbua 8 months ago - 1 comment

#972 - feat(docs): add removed options

Pull Request - State: closed - Opened by Rotzbua 8 months ago - 1 comment

#971 - <img> xss vulnerability

Issue - State: closed - Opened by Koleneko 8 months ago

#970 - build(deps): bump braces from 3.0.2 to 3.0.3

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago
Labels: dependencies, javascript

#969 - KEEP_CONTENT remove contents of all ALLOWED_TAGS

Issue - State: closed - Opened by Firioesa 8 months ago - 2 comments

#968 - Issue secure [email protected] Apache-2.0 + Fair + MPL-2.0

Issue - State: closed - Opened by hero-oceansmart 9 months ago - 1 comment

#967 - A code comment containing a tag name structure leads to removal of the entire block

Issue - State: closed - Opened by ArtemAvseenko 9 months ago - 2 comments

#966 - The MAX_NESTING_DEPTH remove contents issue has not been resolved.

Issue - State: closed - Opened by kakao-bishop-cho 9 months ago - 3 comments

#965 - Escape unsafe characters instead of removing them

Issue - State: closed - Opened by FlawTECH 9 months ago - 3 comments

#964 - Getting 3.x branch ready for 3.1.5 release

Pull Request - State: closed - Opened by cure53 9 months ago

#963 - MAX_NESTING_DEPTH remove contents issue

Issue - State: closed - Opened by kakao-bishop-cho 9 months ago - 5 comments

#962 - HTML and BODY tags are being regardless of `ALLOWED_TAGS` settings

Issue - State: closed - Opened by secret-agent-B 9 months ago - 2 comments

#961 - Bower issues : DOMPurify is not defined

Issue - State: closed - Opened by HakumenNC 9 months ago - 5 comments

#960 - Getting 3.x branch ready for 3.1.4 release

Pull Request - State: closed - Opened by cure53 9 months ago

GitHub / cure53/DOMPurify issues and pull requests