dompurify - npm Package Compare versions

Comparing version 0.6.5 to 0.6.6

bower.json

 {
   "name": "DOMPurify",
-  "version": "0.6.5",
+  "version": "0.6.6",
   "homepage": "https://github.com/cure53/DOMPurify",
@@ -21,6 +21,6 @@ "author": "Cure53 <[e-mail]>",
   ],
-  "license": {
-    "type": "MPL",
-    "url": "https://github.com/cure53/DOMPurify/blob/master/LICENSE"
-  },
+  "license": [
+    "MPL-2.0",
+    "Apache-2.0"
+  ],
   "ignore": [
@@ -27,0 +27,0 @@ "**/.*",

package.json

@@ -15,3 +15,3 @@ {
   "description": "DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's written in JavaScript and works in all modern browsers (Safari, Opera (15+), Internet Explorer (10+), Firefox and Chrome - as well as almost anything else using Blink or WebKit). DOMPurify is written by security people who have vast background in web attacks and XSS. Fear not.",
-  "version": "0.6.5",
+  "version": "0.6.6",
   "main": "purify.js",
@@ -39,3 +39,3 @@ "directories": {
   "author": "Mario Heiderich <[e-mail]> (https://cure53.de/)",
-  "license": "MPL",
+  "license": "MPL-2.0 OR Apache-2.0",
   "bugs": {
@@ -42,0 +42,0 @@ "url": "https://github.com/cure53/DOMPurify/issues"

purify.js

@@ -24,3 +24,3 @@ ;(function(factory) {
      */
-    DOMPurify.version = '0.6.5';
+    DOMPurify.version = '0.6.6';
 
@@ -597,2 +597,3 @@ if (!window || !window.document || window.document.nodeType !== 9) {
         var currentNode;
+        var oldNode;
         var nodeIterator = _createIterator(body);
@@ -602,2 +603,8 @@
         while ( (currentNode = nodeIterator.nextNode()) ) {
+        	
+            /* Fix IE's strange behavior with manipulated textNodes #89 */ 
+            if (currentNode.nodeType === 3 && currentNode === oldNode) {
+                continue;
+            }  	
+
             /* Sanitize tags and elements */
@@ -615,2 +622,4 @@ if (_sanitizeElements(currentNode)) {
             _sanitizeAttributes(currentNode);
+            
+            oldNode = currentNode;
         }
@@ -617,0 +626,0 @@

New alerts

Copyleft License

License

(Experimental) Copyleft license information was found

Found 1 instance in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Non-permissive License

License

(Experimental) A license not known to be considered permissive was found

Found 1 instance in 1 package

Fixed alerts

Copyleft License

License

(Experimental) Copyleft license information was found

Found 2 instances in 1 package

Non-permissive License

License

(Experimental) A license not known to be considered permissive was found

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

582014

decreased by-27.66%

Lines of code

10125

decreased by-7.21%

No dependency changes