DOMPurify 0.6.6

• Fixed around an MSIE/Edge bug causing freezes #89
• Changed from MPL-2.0 to a dual license of Apache-2.0 and MPL-2.0
• Fixed all tests for Microsoft Edge

DOMPurify 0.6.5

• New CSS sanitizer demo hook
• New HTTP proxy demo hook
• New URI scheme white-list demo hook
• Better compatibility with Microsoft Edge
• Better tolerance for custom data attributes
• Fixed a crash on Firefox
• Fixed id and name attribute checks
• Multiple minor fixes and performance enhancements
• Better documentation

DOMPurify 0.6.4

• DOMPurify can now use a custom-made window object
• Added hooks can now be removed and flushed
• A possible clobbering effect for has been mitigated
• Optimizations for RTE / Copy&Paste compatibility
• Test suite has been optimized for better error output
• Fixed a crash in Safari
• Updated MentalJS library in demo hooks

DOMPurify 0.6.3

• Merged countless optimizations and beautifications by @neilj
• Optimized performance thanks to @neilj
• Fixed a minor bug with the RETURN_DOM flag thanks to @neilj
• Detailed list of changes: #52

DOMPurify 0.6.2

• Added hook demo for MentalJS JavaScript sandbox
• Fixed a typo in the hook labels
• Added additional hooks with meta-data objects
• Fixed the tests for Project Spartan 0.10.10049

DOMPurify 0.6.1

• Fixed several security issues identified by a 3rd party code audit
• Removed support for MSIE9
• Enabled toStaticHTML fallback for MSIE9

DOMPurify 0.6.0

Important: This is a feature-release, not a security update.

• Added Hook API to allow custom extensions and plugins
• Added config flag FORBID_TAGS to blacklist specific tags
• Added config flag FORBID_ATTR to blacklist specific attributes
• Added demo folder with various showcases / usage examples
• Extended unit tests
• Added version label to DOMPurify object

DOMPurify 0.4.5

• Fixed a minor DOM clobbering issue reported by @filedescriptor
• Made sure present but empty DOM properties cannot be clobbered
• Made sure that document.all cannot be clobbered by avoiding typeof

DOMPurify 0.4.4

• Fixed a bug in the clobber detection potentially leading to XSS, thanks @avlidienbrunn
• Fixed an undefined error
• Fixed a range error
• Added a pre-test for better performance

DOMPurify 0.4.3

Add Common JS support for browserify (Node.js is not supported yet)