v1.3.0
oleksandr-dukhovnyy
released this
17 Dec 16:24
·
79 commits
to main
since this release
CDN here.
Added assembly for browsers and the ability to connect purify-html from CDN (build for connection via script tag: https://unpkg.com/purify-html@latest/dist/index.browser.js).
This link is always up-to-date version of purify-html, but it is recommended to use the latest version compatible with your code. You can do this by specifying the version (as in package.json) in the link: https://unpkg.com/purify-html@^1.3.0/dist/index.browser.js
Ability to connect custom HTML parser
In addition, the ability to use a custom HTML parser instead of DOMParser has been added. The benefits of using DOMParser are detailed at the beginning of the README.MD file. But if DOMParser is clearly not suitable for you, then you can connect any other parser. For example, for use in Node.
In next updates:
- Configuration (output / suppression of logging to the console)
- Ability to add a callback for cases when the sanitizer found unauthorized content. This may be needed for detailed security and health monitoring. For example, to detect attempts to parse XSS vectors by hackers.
- Support for named rule sets.