Expand DOMPurify section to explain version change from DOMPurify 2.x…

… to 3.x in TinyMCE 6.8.0
tinymce · Jun 18, 2024 · 8adcb75 · 8adcb75
1 parent 108aab4
commit 8adcb75
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...ng-html-input-and-protecting-against-xss-attacks-dom-parser-and-dom-purify.adoc b/...ng-html-input-and-protecting-against-xss-attacks-dom-parser-and-dom-purify.adoc
@@ -14,7 +14,7 @@ Since {productname} 6.0, this basic parser was removed and replaced with two sig
 . the https://developer.mozilla.org/en-US/docs/Web/API/DOMParser[native browser API], `DOMParser()`; and
 . the Free and Open Source _https://github.com/cure53/DOMPurify[XSS sanitizer for HTML, MathML and SVG]_, DOMPurify.
 
-NOTE: {productname} uses DOMPurify 3.x, which was current at the time {productname} {productmajorversion} was developed.
+NOTE: {productname} uses DOMPurify 2.x up to {productname} 6.7.3. This was updated to DOMPurify 3.x in {productname} 6.8, which was current at the time {productname} {productmajorversion} was developed.
 
 Before HTML (or XML) content is passed to {productname} {productmajorversion}, the `DOMParser` API parses the HTML (or XML) string into a https://developer.mozilla.org/en-US/docs/Web/API/Document_Object_Model[DOM object]. As part of this process, `DOMParser` attempts to correct malformed HTML.