EXPLORING THE DOMPURIFY LIBRARY: BYPASSES AND FIXES (1/2)

Summary from the TLDR InfoSec newsletter

This is the first out of two articles that cover DOMPurify security bypasses discovered in early 2024 by various researchers. Affecting versions 3.1.0-3.1.2, the vulnerabilities include exploits that use deep nesting and DOM clobbering techniques.