DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
When upgrading from 3.0.6 to 3.0.7, a TypeError is getting thrown when calling sanitize if the configuration object contains any null values. The issue appears to be this line in the clone utility since typeof null === 'object'. For now we have replaced null with undefined.
Background & Context
When upgrading from
3.0.6
to3.0.7
, aTypeError
is getting thrown when callingsanitize
if the configuration object contains anynull
values. The issue appears to be this line in theclone
utility sincetypeof null === 'object'
. For now we have replacednull
withundefined
.Bug
Input
Given output
Expected output
Expected no error to be thrown.