This issue has been created

There are 4 updates.

/

Closed

Upgrade to dompurify 3.2.6

View issue · Add comment

Issue created

Manuel Leduc created this issue on 06/Jun/25 17:20

Summary:	Upgrade to dompurify 3.2.6
Issue Type:	Task
Affects Versions:	0.18
Assignee:	Unassigned
Components:	Dependency Upgrades
Created:	06/Jun/25 17:20
Priority:	Major
Reporter:	Manuel Leduc
Description:	Release Notes cure53/DOMPurify (dompurify) `v3.2.6`: DOMPurify 3.2.6 Compare Source Fixed several typos and removed clutter from our documentation, thanks @Rotzbua Added `matrix:` as an allowed URI scheme, thanks @kleinesfilmroellchen Added better config hardening against prototype pollution, thanks @EffectRenan Added better handling of attribute removal, thanks @michalnieruchalski-tiugo Added better configuration for aggressive mXSS scrubbing behavior, thanks @BryanValverdeU Removed the script that caused the fake entry CVE-2025-48050

4 updates

Changes by Manuel Leduc on 06/Jun/25 17:20

Documentation in Release Notes:	N/A
Documentation:	N/A
Resolution:	Fixed
Status:	Open Closed

This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6)

If image attachments aren't displayed, see this article.