I'm a security researcher who has been fuzzing famous XSS sanitizers.
While fuzzing the sanitizers, my fuzzer triggered an alert that shows bluemonday is vulnerable to bypass.
After some checks, I confirmed that this is a vulnerability, so I'm reporting it here.
Reported by @Ry0taK at 2021-03-27T01:00
bluemonkey.zip