I’m sorry to ask this, but version 3.2.5 was just released which accounts for the same issue again. The PenTest Vendor wants this update . Can purify be updated to this version 3.2.5 . Thanks
DOMPurify 3.2.5 Latest
- Added a check to the mXSS detection regex to be more strict, thanks @masatokinugawa
Thank you for fixing this so fast .