search

cure53 / DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
https://cure53.de/purify
Other
13.97k stars 723 forks source link

DOMPurify 2.4.6 not published on npm #834

Closed 0xbb closed 1 year ago

0xbb commented 1 year ago

Background & Context

Bug

Hello! I think version 2.4.6 was not published on npm. See https://www.npmjs.com/package/dompurify/v/2.4.6 Could you be so kind to check if the release got stuck somewhere?

cure53 commented 1 year ago

Oh, indeed! :D Thanks for noticing and fixed.

0xbb commented 1 year ago

Thank you very much :)

NormandoHall commented 1 year ago

Now npm claims update to 2.4.6 but I have 3.0.4

cure53 commented 1 year ago

Weird, try again please, we pushed 2.4.7 today.

NormandoHall commented 1 year ago

I am stick on 3.0.4 but get me 2.4.x, so I think you should push 3.0.5, or is there any npm command to stick to 3.0.x branch?

npm outdated
Package        Current  Wanted  Latest  Location                    Depended by
dompurify        3.0.4   3.0.4   2.4.7  node_modules/dompurify      devel
cure53 commented 1 year ago

3.0.5 was just pushed as well :)

https://www.npmjs.com/package/dompurify/v/3.0.5 https://www.npmjs.com/package/dompurify/v/2.4.7