From 2f11fdb43cbc68035962515163b2460c5be994e9 Mon Sep 17 00:00:00 2001 From: Karl Kemister-Sheppard Date: Thu, 9 Jul 2026 13:09:55 +1000 Subject: [PATCH] Docs: TINYDOC-3528 - Updated the bundled DOMPurify dependency to the latest version --- modules/ROOT/pages/8.8.0-release-notes.adoc | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/modules/ROOT/pages/8.8.0-release-notes.adoc b/modules/ROOT/pages/8.8.0-release-notes.adoc index 8f2fdad0d0..f7151abc3c 100644 --- a/modules/ROOT/pages/8.8.0-release-notes.adoc +++ b/modules/ROOT/pages/8.8.0-release-notes.adoc @@ -116,6 +116,13 @@ For information on using Enhanced Skins & Icon Packs, see: xref:enhanced-skins-a // CCFR here. +=== Updated the bundled DOMPurify dependency to the latest version +// #TINYMCE-14556 + +Previously, {productname} bundled an older version of the DOMPurify sanitization library. Although {productname} was not affected by the published DOMPurify advisories, because they relate to DOMPurify options that {productname} does not use, the outdated version could be flagged by automated security scanners. + +In {productname} {release-version}, DOMPurify has been updated to the latest version. This resolves the scanner warnings without changing {productname}'s sanitization behavior. + [[additions]] == Additions