dompurify
npm
pkg:npm/dompurify
5,757 Dependabot PRs
1 day ago
3,528 repositories
36 repositories
Security Advisories
DOMPurify USE_PROFILES prototype pollution allows event handlers
Cross-Site Scripting in dompurify
DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallback
DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently pollutes `DEFAULT_ALLOWED_TAGS` / `DEFAULT_ALLOWED_ATTR`
DOMPurify: `IN_PLACE` mode trusts attacker-controlled `nodeName` on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects
Recent PRs
chore(deps): Bump the bun-minor-patch group with 15 updates
Pierre-Mike/pi-browser-dashboard #462
build(deps): bump the npm_and_yarn group across 2 directories with 5 updates
softmaple/softmaple #810
chore(deps): bump dompurify from 3.4.11 to 3.4.12 in /frontend
Bump dompurify from 3.4.11 to 3.4.12 in /js
jpmorganchase/nbcelltests #351
chore(deps): bump dompurify from 3.4.0 to 3.4.12
312-dev/scrolly #212
chore(deps): bump dompurify from 3.4.11 to 3.4.12
chore(deps): Bump dompurify from 3.4.4 to 3.4.12
603-websites/elite-car-detailing #28
chore(deps): bump dompurify from 3.4.6 to 3.4.12
Dustin4444/docs-1 #166
chore(deps): bump dompurify from 3.4.11 to 3.4.12
chore(deps): bump the all-dependencies group across 1 directory with 54 updates
Clarion1631/probuild #219
chore(deps): bump dompurify from 3.4.1 to 3.4.12 in /superset-frontend
chore(deps): bump the npm_and_yarn group across 11 directories with 12 updates
tabrezahmed51/Dev-AI-group-agent_0118 #27
chore(deps): bump dompurify from 3.4.11 to 3.4.12 in /mingla-business in the npm_and_yarn group across 1 directory
Mingla-LLC/mingla-main #1049
chore(deps): update dompurify requirement from ^3.4.11 to ^3.4.12 in /superset-frontend/plugins/legacy-preset-chart-nvd3
withchris-kavia/superset-347930 #77
chore(deps): bump the npm_and_yarn group across 3 directories with 5 updates
kenhaesler/ai-portainer-dashboard #1575
chore(deps): bump the dependencies group across 1 directory with 13 updates
Viswanathan49/carbon-awareness-platform #5
chore(deps): bump dompurify from 3.4.11 to 3.4.12
chore(deps): bump the patch-and-minor group across 1 directory with 10 updates
alksnd/trinity #22
chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates
build(deps): Bump the monorepo-minor-patch group across 1 directory with 3 updates
보안(deps): Bump the landing-all group across 1 directory with 17 updates
chore(deps): bump the frontend-dependencies group across 1 directory with 49 updates
TouchAI-org/TouchAI #504
build(deps): bump the npm_and_yarn group across 2 directories with 3 updates
build(deps): bump the npm_and_yarn group across 1 directory with 6 updates
ukprmenbersaku-abc/ukpr-s-benri #2
Bump the npm_and_yarn group across 1 directory with 18 updates
rzazadebilal7/cloudflare-docs #3
chore(deps): bump the production-dependencies group across 1 directory with 29 updates
maniczko/audioRecorder #1359
chore(deps): bump the npm_and_yarn group across 4 directories with 4 updates
daemon-blockint-tech/daemoncode #43
chore(deps): bump the npm_and_yarn group across 9 directories with 9 updates
chore(deps): bump the npm_and_yarn group across 6 directories with 9 updates
chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates
ai-shifu/ai-shifu #2014
deps(frontend): bump the minor-and-patch group with 28 updates
ChaLconner/purrfect-spots #156
chore(deps): bump the patches group across 1 directory with 10 updates
cyberuci/cyberuci #415
chore(deps-dev): bump the development-dependencies group across 1 directory with 38 updates
Waterproof82/smart_connect #42
chore(deps): bump the npm_and_yarn group across 4 directories with 13 updates
rtaran/openclaw #14
chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates
seanmorley15/AdventureLog #1197
Bump the npm_and_yarn group across 2 directories with 11 updates
GlacierEQ/plate #56
chore(deps): bump the npm_and_yarn group across 7 directories with 9 updates
deps: bump the minor-and-patch group across 1 directory with 19 updates
chore(deps): bump the minor-and-patch group across 1 directory with 42 updates
Bump the minor-and-patch group across 1 directory with 7 updates
justingallivan/wmkf-research-apps #47
chore(deps): bump the npm_and_yarn group across 1 directory with 8 updates
kattacoda/CIPP #40
chore(deps): bump the npm-dependencies group in /client-app with 22 updates
Wolido/OpenAaaS #160
build(deps): bump the dependencies group across 1 directory with 19 updates
ISDuBA/ISDuBA #1551
chore(deps-frontend): bump the npm-minor-patch group in /frontend with 23 updates
chore(deps): update dompurify requirement from ^3.4.9 to ^3.4.11 in /superset-frontend/plugins/legacy-preset-chart-nvd3
jerushaotieno/superset_project_test #81
Bump the javascript group with 88 updates
shakacode/react-on-rails-demo-gumroad-rsc #49
chore(deps): bump dompurify from 3.4.10 to 3.4.11 in the npm_and_yarn group across 1 directory
KooshaPari/Dino #309
chore(deps): bump the production-dependencies group across 1 directory with 31 updates
buggyblues/shadow #406
Package Details
| Name: | dompurify |
| Ecosystem: | npm |
| PURL Type: | npm |
| Package URL: | pkg:npm/dompurify |
| JSON API: | View JSON |
Security Advisories
Package Information
DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's written in JavaScript and works in all modern browsers (Safari, Opera (15+), Internet Explorer (10+), Firefox and Chrome - as well as almost anything else usin
| Repository: | https://github.com/cure53/DOMPurify |
| Homepage: | https://github.com/cure53/DOMPurify |
| Latest Release: |
3.2.6
about 1 year ago |
| Dependent Repos: | 56,633 |
| Dependent Packages: | 1,705 |
| Downloads: | 43,072,032 |
| Ranking: | Top 0.1284% by dependent repos Top 0.0589% by downloads Top 0.0449% by dependent pkgs |