Sourced from dompurify's releases.

DOMPurify 3.2.7

• Added new attributes and elements to default allow-list, thanks @​elrion018
• Added tagName parameter to custom element attributeNameCheck, thanks @​nelstrom
• Added better check for animated href attributes, thanks @​llamakko
• Updated and improved the bundled types, thanks @​ssi02014
• Updated several tests to better align with new browser encoding behaviors
• Improved the handling of potentially risky content inside CDATA elements, thanks @​securityMB & @​terjanq
• Improved the regular expression for raw-text elements to cover textareas, thanks @​securityMB & @​terjanq

• eaa0bdb Merge pull request #1144 from cure53/main
• f712593 fix: removed a possibly dossy regex
• eb9b3b6 Merge branch 'main' of github.com:cure53/DOMPurify
• ce006f7 chore: Preparing 3.2.7 release
• ef0e0cb chore: Preparing 3.2.6 release
• 2f09cd3 Update README.md
• 6a795bc Merge pull request #1142 from cure53/dependabot/github_actions/actions/setup-...
• 2458bbd build(deps): bump actions/setup-node from 4 to 5
• e43d3f3 Merge pull request #1136 from cure53/dependabot/github_actions/actions/checko...
• 6f5be37 build(deps): bump actions/checkout from 4 to 5
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)