Skip to content

fix(deps): update dependency dompurify to ^3.4.10#425

Merged
academy-renovate[bot] merged 1 commit into
developfrom
renovate/dompurify-3.x
Jun 17, 2026
Merged

fix(deps): update dependency dompurify to ^3.4.10#425
academy-renovate[bot] merged 1 commit into
developfrom
renovate/dompurify-3.x

Conversation

@academy-renovate

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
dompurify ^3.4.8^3.4.10 age confidence

Release Notes

cure53/DOMPurify (dompurify)

v3.4.10: DOMPurify 3.4.10

Compare Source

  • Refactored codebase for clarity: extracted the public type declarations into types.ts
  • Decomposed the three largest sanitizer functions into focused helpers
  • Removed duplicated defaults and dead branches, consolidated SAFE_FOR_TEMPLATES scrubbing into single shared path
  • Improved per-node performance by hoisting the mXSS probe regexes and testing textContent before innerHTML
  • Added a deterministic micro-benchmark harness (npm run bench) with a --compare mode
  • Reduced CI cost by running the full three-engine browser suite once per PR
  • Refreshed the demos/ folder so every demo runs again, and added a SVG-via-<img> demo
  • Documented the bench and test:happydom scripts in the README
  • Completed the Attack Classes & Bypass History wiki page
  • Bumped several dependencies where possible

v3.4.9: DOMPurify 3.4.9

Compare Source

  • Further improved the handling of Trusted Types config options, thanks @​offset
  • Further improved the handling of IN_PLACE sanitization, thanks @​mozfreddyb
  • Added more test coverage for IN_PLACE and Trusted Types related usage
  • Bumped several dependencies where possible
  • Updated README and wiki with more accurate documentation & attack samples

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot (Logs).

@academy-renovate academy-renovate Bot enabled auto-merge June 17, 2026 04:59
@academy-renovate academy-renovate Bot added this pull request to the merge queue Jun 17, 2026
@github-actions

Copy link
Copy Markdown

Preview deployed to https://f777abf9.academy-admin-preview.pages.dev (total size: 3.7M)

Merged via the queue into develop with commit a7dce3d Jun 17, 2026
2 checks passed
@academy-renovate academy-renovate Bot deleted the renovate/dompurify-3.x branch June 17, 2026 05:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants