Code

2.x#1046

Code

Closed

cure53 wants to merge 54 commits intomaincure53/DOMPurify:mainfrom 2.xcure53/DOMPurify:2.xCopy head branch name to clipboard

+2,587-2,471

Commits

Commits on Feb 7, 2023

• See #761

  Show description for 5f766bc
  cure53

  committed
  5f766bc

• test: Added 2.x tag to 2.x branch actions

  cure53

  committed
  08e9fab

Commits on Feb 13, 2023

• see #767

  Show description for f5c25ac
  cure53

  committed
  f5c25ac

• chore: preparing 2.4.4 release

  cure53

  committed
  fa4e8ee

Commits on Feb 26, 2023

• chore: preparing 2.4.5 release

  cure53

  committed
  f464d95

Commits on Jun 29, 2023

• Fix: addressed a bypass on jsdom 22 when noframes tag is allowed

  cure53

  committed
  a01c083

• chore: Preparing 2.4.6 release

  cure53

  committed
  5b7dff9

Commits on Jul 11, 2023

• chore: Preparing 2.4.7. release

  Show description for ef731c0
  cure53

  committed
  ef731c0

Commits on Mar 19, 2024

• fix: cherry-picked fixes for XML & CE bypass

  cure53

  committed
  f0e75b0

• chore: Preparing 2.4.8. release

  cure53

  committed
  4035e3a

• chore: Preparing 2.4.8 release

  cure53

  committed
  416ba67

Commits on Mar 21, 2024

• fix: Merged relevant changes from main for 2.4.9

  cure53

  committed
  0940755

• chore: Preparing 2.4.9 release

  cure53

  committed
  79cfb37

Commits on Apr 6, 2024

• feature: Added SAFE_FOR_XML flag and code to 2.x branch

  cure53

  committed
  28381af

• chore: Preparing 2.5.0 release

  cure53

  committed
  2dcadf0

Commits on Apr 7, 2024

• docs: Updated year in LICENSE file for 2.x as well

  cure53

  committed
  6f9902d

• chore: Updated some packages

  cure53

  committed
  7f6cf8a

Commits on Apr 25, 2024

• chore: Updated 2.x branch with relevant fixes for nesting-based mXSS

  cure53

  committed
  0ef5e53

• test: Fixed a linter issue breaking the tests

  cure53

  committed
  2076d1b

Commits on Apr 26, 2024

• fix: Started to set new MAX_NESTING_DEPTH limits as well

  cure53

  committed
  8589191

• test: Fixed the tests for new MAX_NESTING_DEPTH limit

  cure53

  committed
  381bc61

• chore: Preparing 2.5.1 release

  cure53

  committed
  f275c0b

Commits on Apr 30, 2024

• chore: Migrated relevant changes from main over to 2.x

  cure53

  committed
  fc9f702

• chore: Preparing 2.5.2 release

  cure53

  committed
  d299fcc

Commits on May 5, 2024

• chore: Getting 2.x branch up to date with main

  cure53

  committed
  b81a576

Commits on May 7, 2024

• fix: Added better configurability for new comment behavior

  cure53

  committed
  76a19d1

Commits on May 10, 2024

• chore: Getting 2.x branch up to date with main

  cure53

  committed
  2e0d6d9

Commits on May 11, 2024

• chore: chore: Preparing 2.5.3 release

  cure53

  committed
  481ff8e

• docs: Updated README.md with right version number

  cure53

  authored
  b45d789

• fix: Merged prototype pollution check into 2.x

  cure53

  committed
  26e1d69

• Merge branch '2.x' of github.com:cure53/DOMPurify into 2.x

  cure53

  committed
  e1ddfc7

Commits on May 18, 2024

• fix: Fixed an issue with MSIE and no support for Number.isNaN

  cure53

  committed
  f3a9710

• test: Attempting to get MSIE 11 back into the browser test array

  cure53

  committed
  62fe3be

• fix: Added a better for for the MSIE iNaN issue

  Show description for 707b3d6
  cure53

  committed
  707b3d6

• chore: Preparing 2.5.4 release

  cure53

  committed
  b188787

• test: Changed github config to include MSIE tests for 2.x

  cure53

  committed
  2c9bca9

Commits on May 19, 2024

• test: Fixed several new tests for MSIE11 and Edge 18

  cure53

  committed
  2c6410a

• test: Fixed more tests for MSIE and Edge 18

  cure53

  committed
  1401208

• test: Fixed two more tests for MSIE11 and Edge 18

  Show description for 1c92880
  cure53

  committed
  1c92880

• docs: Updated README ever so slightly

  Show description for 10c1261
  cure53

  committed
  10c1261

Commits on May 27, 2024

• chore: Also removed depth counter logic from 2.x branch for now

  cure53

  committed
  f1e27e6

Commits on May 31, 2024

• chore: Preparing 2.5.5 release

  cure53

  committed
  de2545c

Commits on Jun 10, 2024

• See #961

  Show description for 9a7cd98
  cure53

  committed
  9a7cd98

Commits on Jun 25, 2024

• fix: Added changes to 2.x regarding attribute value checks

  cure53

  committed
  38e8410

Commits on Jul 5, 2024

• chore: Preparing 2.5.6 release

  cure53

  committed
  d78f241

Commits on Sep 26, 2024

• chore: Preparing 2.5.7 release

  cure53

  committed
  71683cb

Commits on Nov 15, 2024

• Update README.md

  cure53

  authored
  1bb377b

Commits on Nov 20, 2024

• Update README.md

  cure53

  authored
  f7712e4

Commits on Nov 29, 2024

• Update README.md

  cure53

  authored
  193eef2

Commits on Dec 6, 2024

• fix: Fixed two conditional bypasses discovered by @parrot409 and @Slonser

  cure53

  committed
  f7120a3

Commits on Dec 7, 2024

• fix: Added same attribute clobbering check for 2.x branch

  cure53

  committed
  9cd4f11

Commits on Dec 9, 2024

• chore: Preparing 2.5.8 release

  cure53

  committed
  0d770cd

• test: Trying to work around a false alert in IE11 Win 8.1

  cure53

  committed
  8b68e9e

• test: Updated a custom element test for IE11 on Windows 10

  cure53

  committed
  ee992fc