DOMPurify v2.0.1 Release Notes
Release Date: 2019-09-19 // over 4 years ago-
- 🛠 Fixed a bypass affecting latest Chrome, caused by a newly discovered Chrome mXSS vulnerability
- ➕ Added tests to cover implemented fixes
🍱 Credits go to Michał Bentkowski (@securityMB) of Securitum who spotted the bug in Chrome, turned it into a DOMPurify bypass, reported and helped verifying the fix. 🙇