Cross-Site Scripting (XSS)

DOMPurify is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to hooks being able to modify live references to the default ALLOWEDTAGS and ALLOWEDATTR sets, which permanently alters the sanitizer's default configuration and allows an attacker to persistently bypass sanitization by...