Version 3.4.0 of DOMPurify was released today, addressing a large number of issues reported by LLMs and real people alike.

[cure53@infosec.exchange]

Version 3.4.0 of DOMPurify was released today, addressing a large number of issues reported by LLMs and real people alike.

Thanks to all who contributed.

Release DOMPurify 3.4.0 · cure53/DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo: - Release DOMPurify 3.4.0 · cure53/DOMPurify

GitHub (github.com)

We hope everything went smoothly and that no one was overlooked in the release notes.