Skip to main content

Tuleap Community Edition development and releases are no longer public. You have until September 30th to download packages and sources in Tuleap project. You can contact the team if you need further assistance.

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #41794 DOMPurify: bump to 3.2.4
    Infos
    #41794
    Thomas Gerbet (tgerbet)
    2025-01-31 16:57
    2025-01-30 14:03
    43525
    Details
    DOMPurify: bump to 3.2.4

    The mXSS bypass does not affect us with the configuration we are currently using but it would be better to not have it at all.

    https://github.com/cure53/DOMPurify/releases/tag/3.2.4

    Empty
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2025-01-31
    Attachments
    Empty
    References
    Referencing request #41794

    Artifact

    request #41843 DOMPurify: 3.2.3 -> 3.2.4
    Referenced by request #41794

    Artifact

    rel #41091 16.5

    Other

    gerrit #33328
    Display settings

    Follow-ups