DOMPurify 2.4.2

• Fixed a Trusted Types sink violation with empty input and NAMESPACE , thanks @tosmolka
• Fixed a Prototype Pollution issue discovered and reported by @kevin-mizu

DOMPurify 2.4.1

• Added new config option ALLOWED_NAMESPACES for better XML handling, thanks @kevin-deyoungster @tosmolka
• Added better detection of template literals when SAFE_FOR_TEMPLATES is true
• Fixed an exception caused by DOM clobbering, thanks @masatokinugawa
• Bumped some dependencies, thanks @marcpenya-tf

DOMPurify 2.4.0

• Removed bundled types again as they caused too much trouble

DOMPurify 2.3.12

• Fixed an issue in 2.3.11 causing errors w. TypeScript, see #712, thanks @Mirco469, @brentkeller, @aryanisml

DOMPurify 2.3.11

• Added generated type definitions for better compatibility
• Added SANITIZE_NAMED_PROPS config option, thanks @SoheilKhodayari
• Updated README and config documentation, thanks @0xedward
• Updated test suite with newer Node versions

DOMPurify 2.3.10

• Added support for sanitization of attributes requiring Trusted Types, thanks @tosmolka

DOMPurify 2.3.9

• Made TAG and ATTR config options case-sensitive when parsing XHTML, thanks @tosmolka
• Bumped some dependencies, thanks @is2ei
• Included github-actions in the dependabot config, thanks @nathannaveen

DOMPurify 2.3.8

• Cleaned up a minor issue with the 2.3.7 release, thanks @johnbirds

No other changes compared to 2.3.7 release, which entail:

• Fixes around a bug in Safari, thanks @sybrew
• Slightly improved performance, thanks @tiny-ben-tran
• Lots of chores, bumps and typo fixes, thanks @is2ei
• Removed unnecessary string trimming, thanks @christopherehlen

DOMPurify 2.3.6

• Added an option to allow HTML5 doctypes, thanks @tosmolka
• Bumped several dependencies, thanks @is2ei
• Updated documentation to cover recently added flags, thanks @is2ei

DOMPurify 2.3.5

• Performed several chores and cleanups, thanks @is2ei
• Fixed a bug when working with Trusted Types, thanks @tosmolka
• Fixed a bug with weird behavior on insecure nodes in IN_PLACE mode, thanks @tosmolka
• Added more SVG attributes to allow-list, thanks @rzhade3