{"meta":{"name":"FindSoftware","page":"https://findsoftware.frbit.cloud/dompurify/","markdown":"https://findsoftware.frbit.cloud/dompurify.md","license":"https://creativecommons.org/licenses/by/4.0/","attribution":"FindSoftware, CC BY 4.0","note":"Attributes are recorded, never scored. An absent field means unknown, never zero and never bad."},"record":{"id":"dompurify","name":"DOMPurify","urls":{"home":"https://cure53.de/purify","repository":"https://github.com/cure53/DOMPurify"},"category":["library"],"description":"DOM-based XSS sanitizer that cleans HTML, MathML and SVG markup in the browser or on Node.js.","maintainer":"Dr.-Ing. Mario Heiderich, Cure53","maintainerType":"individual","firstRelease":2014,"hqCountry":"DE","hosting":["node"],"language":"javascript","runtime":["node"],"contentStore":null,"databases":null,"adminUi":null,"headlessApi":null,"templating":null,"i18n":null,"runsAs":null,"renderingModes":null,"licenseModel":"open-source","license":"MPL-2.0, Apache-2.0","currentMajor":"3","latestReleaseDate":"2026-10-12T00:00:00.000Z","githubStargazers":17503,"contributors":125,"packagistDownloads":null,"npmWeeklyDownloads":95817333,"dependentRepos":56633,"dependentPackages":1705,"checkedAt":"2026-11-04T00:00:00.000Z","addedAt":"2026-11-04T00:00:00.000Z","sources":[{"field":"urls","url":"https://cure53.de/purify","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"urls","url":"https://api.github.com/repos/cure53/DOMPurify","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"maintainer","url":"https://github.com/cure53/DOMPurify/blob/main/package.json","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"hqCountry","url":"https://cure53.de/impressum.php","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"firstRelease","url":"https://api.github.com/repos/cure53/DOMPurify/git/ref/tags/v0.3","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"category","url":"https://github.com/cure53/DOMPurify/blob/main/README.md","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"language","url":"https://api.github.com/repos/cure53/DOMPurify","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"runtime","url":"https://github.com/cure53/DOMPurify/blob/main/README.md","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"license","url":"https://github.com/cure53/DOMPurify/blob/main/package.json","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"license","url":"https://github.com/cure53/DOMPurify/blob/main/package.json","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"currentMajor","url":"https://api.github.com/repos/cure53/DOMPurify/releases/latest","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"latestReleaseDate","url":"https://api.github.com/repos/cure53/DOMPurify/releases/latest","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"githubStargazers","url":"https://api.github.com/repos/cure53/DOMPurify","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"contributors","url":"https://api.github.com/repos/cure53/DOMPurify/contributors?per_page=1","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"npmWeeklyDownloads","url":"https://api.npmjs.org/downloads/range/2026-10-26:2026-11-01/dompurify","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"dependentPackages","url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/dompurify","checkedAt":"2026-11-04T00:00:00.000Z"},{"field":"dependentRepos","url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/dompurify","checkedAt":"2026-11-04T00:00:00.000Z"}],"status":"active","ai":"authored"},"prose":"DOMPurify is a DOM-based sanitizer that removes unsafe content from HTML, MathML and SVG strings to prevent cross-site scripting. The [README](https://github.com/cure53/DOMPurify/blob/main/README.md) says DOMPurify is included on a website and runs in the browser, and that it also works server-side with Node.js, where a DOM such as jsdom has to be supplied.\n\n## Worth knowing\n\nThe README says that server-side use depends on the DOM supplied, that happy-dom is not considered safe for it, and that legacy browsers such as MSIE get no sanitizing; security updates for MSIE come from an older branch."}