Summary

The release adds better clobbering hardening when XML content is involved and includes several smaller hardening and edge-case improvements. It also updates dependencies where possible.

Why it matters

DOM sanitisation remains a foundational defence for web applications that render untrusted content, and parser-specific edge cases can undermine otherwise sound XSS controls.

Sources