cure53 / DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
https://cure53.de/purify
Other
13.34k stars 690 forks source link

Issue secure dompurify@2.5.5 Apache-2.0 + Fair + MPL-2.0 #968

Closed hero-oceansmart closed 1 month ago

hero-oceansmart commented 1 month ago

This issue proposes a [bug, feature] which...

Background & Context

Please provide some more detailed information about the general background and context of this issue and delete non applicable sections below.

Bug

Input

Some HTML which is thrown at DOMPurify.

Given output

The output given by DOMPurify.

Expected output

The expected output.

Feature

Briefly outline the proposed feature, its value and a potentially proposed implementation from a high level.

cure53 commented 1 month ago

Not sure what is expected here, sorry.