Skip to content
npm

dompurify

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It runs as JavaScript and works in all modern browsers, as well as in Node.js (via jsdom). DOMPurify is written by security people who have vast background in web a

cross-site-scriptingdomdompurifyhtmljavascriptmathmlprevent-xss-attackssanitizer
github.com/cure53/DOMPurifyMPL-2.0cure5395.8M / week17.5k · 880 forks · 137 contributors
Compare
Compares against 3.4.17 (latest stable)
Latest Stable3.4.17Oct 12, 2026
Release cadenceEvery 2 weeks
Last releaseOct 12, 2026
Open advisories2
Changelog quality100% curated
GitHub Releases
SecurityYou're on
3.x
STABLE · RCPRE-RELEASE2024AprJulOct2025AprJulOct2026AprJulOct

99 older or filtered releases not shown.

Breaking changes and a migration checklist for each major version