Background & Context It looks like DOMPurify is removing the <

Removal of <textarea> `wrap` attribute about dompurify HOT 3 CLOSED

HaluanUskoa commented on July 24, 2024

Removal of

`wrap` attribute<p>from dompurify.</p></section>
</section>

</article>

<article>
  <h2 class="h2">Comments (3)</h2>
  
    
    
<section class="issue-comment">
  <section id="2017417910" class="issue-head">
    <img class="issue-avatar" src="https://avatars.githubusercontent.com/u/6709482?s=30&u=4149eb5ebf4e59175c31bbc618805bce4d0535dc&v=4" alt="cure53 avatar" />
    <a class="issue-username" href="/cure53">cure53</a>
    <span class="issue-time"> commented on July 24, 2024 </span>
    
    <span class="issue-vote"> <i class="icon-vote"></i>1 </span>
    
  </section>
  <section class="markdown markdown-js p-5"><p dir="auto">Hey there, thanks for raising this - as far as I can see, there is no security-related reason for removing the wrap attribute, we should safely be able to add it.</p>
<p dir="auto">Wanna spin up a PR? :)</p><p>from dompurify.</p></section>
</section>

<section class="issue-comment">
  <section id="2018616797" class="issue-head">
    <img class="issue-avatar" src="https://avatars.githubusercontent.com/u/152920040?s=30&v=4" alt="HaluanUskoa avatar" />
    <a class="issue-username" href="/HaluanUskoa">HaluanUskoa</a>
    <span class="issue-time"> commented on July 24, 2024 </span>
    
  </section>
  <section class="markdown markdown-js p-5"><p dir="auto">Thanks for the quick response! And also for the great library.</p>
<p dir="auto">I'm not too familiar with its internal workings, but I did a quick review and I think (hope) the fix was just adding the <code class="notranslate">wrap</code> attribute to the <code class="notranslate">html</code> list in <code class="notranslate">attrs.js</code>? I opened a PR with that change, if that's hopefully all that was needed.</p><p>from dompurify.</p></section>
</section>

<section class="issue-comment">
  <section id="2019940260" class="issue-head">
    <img class="issue-avatar" src="https://avatars.githubusercontent.com/u/6709482?s=30&u=4149eb5ebf4e59175c31bbc618805bce4d0535dc&v=4" alt="cure53 avatar" />
    <a class="issue-username" href="/cure53">cure53</a>
    <span class="issue-time"> commented on July 24, 2024 </span>
    
  </section>
  <section class="markdown markdown-js p-5"><p dir="auto">This looks great, thank you :)</p><p>from dompurify.</p></section>
</section>

</article>

<ins class="adsbygoogle"
      style="display:block"
      data-ad-client="ca-pub-7917632214101949"
      data-ad-slot="6627871389"
      data-ad-format="auto"
      data-full-width-responsive="true"></ins>
    <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script>
  
<section>
  <h2 class="h2">Related Issues (20)</h2>
  <div class="issue">
    <ul>
      
        <li>
          <a href="/cure53/dompurify/issues/929">n</a> 
          
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/930">Title: Sanitization removes valid iframe attributes and changes attribute order</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 8</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/931">Fix for bug in demo hooks-sanitize-css-demo.html</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 3</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/932">Sanitization Issue: Comments Removed Despite ADD_TAGS Configuration</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 8</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/933">Sanitization Issue with DomPurify</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 3</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/935">New release v3.1.0 (not in releases)</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 1</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/937">How do I use the API provided by DomPurify to verify the SVG file is it risky?</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 1</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/938">Sanitize returns empty string when PARSER_MEDIA_TYPE: application/xhtml+xml and void tags</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 4</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/939">DOMPurify and Trusted Types - Clarification to Docs</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 9</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/946">when using bypasssecurityTrustHtml mthod to render template </a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 3</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/947">Exception when passing 0 or "" or null to Dompurify.Sanitize Method</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 2</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/949">Use lower case for bower package name</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 1</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/950">Uncertain how to handle 'non-standard' HTML</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 3</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/951">Need to block external calls, e.g. all HTTP requests</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 7</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/952">Why does name="name" on an input field get purified?</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 1</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/953">Exception when passing 0 or "" or null to Dompurify.Sanitize Method #947</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 3</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/954">Latest versions of DOMPurify 2.5.x block custom SVG elements when they are set via ADD_TAGS config.</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 6</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/955">release 3.1.3 assets are the same as 3.1.2</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 1</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/958">Number.isNaN is not supported in MSIE</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 15</span>
        </li>
      
        <li>
          <a href="/cure53/dompurify/issues/961">Bower  issues : DOMPurify is not defined</a> 
          <span class="text-red-600 text-xs font-normal py-0.5 px-1 border border-red-600 rounded-md">HOT 5</span>
        </li>
      
    </ul>
  </div>
</section>

</main>
        <section id="more" class="flex-none w-full md:w-60 text-gray-600 bg-gray-50 px-5 md:px-3 rounded-md dark-color">
          <div class="w-full md:w-60 h-0.5"></div>
          <section>
            
            <a href="https://glbgpt.com?ref=githubhelp" target="_blank" class="block">
              <article id="right-girl-box" class="small-box overflow-hidden" style="padding:0;"></article>
            </a>
            
            
            
<h2 class="h2 py-3.5">Recommend Projects</h2>
            <ul>
              <li class="mb-4">
                
    <ins class="adsbygoogle"
      style="display:block"
      data-ad-client="ca-pub-7917632214101949"
      data-ad-slot="6627871389"
      data-ad-format="auto"
      data-full-width-responsive="true"></ins>
    <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script>
  
              </li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/facebook/react">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://raw.githubusercontent.com/facebook/create-react-app/master/packages/cra-template/template/public/logo192.png"
        alt="React photo"
      />
      
      React
    </a>
  </h3>
  <p class="article-more pt-1">A declarative, efficient, and flexible JavaScript library for building user interfaces.</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/vuejs/vue">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://camo.githubusercontent.com/c8f91d18976e27123643a926a2588b8d931a0292fd0b6532c3155379e8591629/68747470733a2f2f7675656a732e6f72672f696d616765732f6c6f676f2e706e67"
        alt="Vue.js photo"
      />
      
      Vue.js
    </a>
  </h3>
  <p class="article-more pt-1">🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/microsoft/TypeScript">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://www.typescriptlang.org/favicon-32x32.png"
        alt="Typescript photo"
      />
      
      Typescript
    </a>
  </h3>
  <p class="article-more pt-1">TypeScript is a superset of JavaScript that compiles to clean JavaScript output.</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/tensorflow/tensorflow">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://camo.githubusercontent.com/c04e16c05de80dadbdc990884672fc941fdcbbfbb02b31dd48c248d010861426/68747470733a2f2f7777772e74656e736f72666c6f772e6f72672f696d616765732f74665f6c6f676f5f736f6369616c2e706e67"
        alt="TensorFlow photo"
      />
      
      TensorFlow
    </a>
  </h3>
  <p class="article-more pt-1">An Open Source Machine Learning Framework for Everyone</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/django/django">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://avatars2.githubusercontent.com/u/27804?s=200&v=4"
        alt="Django photo"
      />
      
      Django
    </a>
  </h3>
  <p class="article-more pt-1">The Web framework for perfectionists with deadlines.</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/laravel/laravel">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://laravel.com/img/logomark.min.svg"
        alt="Laravel photo"
      />
      
      Laravel
    </a>
  </h3>
  <p class="article-more pt-1">A PHP framework for web artisans</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/d3/d3">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://camo.githubusercontent.com/586ccf0aad9684edc821658cee04146cf36d1f1d5ec904bbefd72728909ccb2e/68747470733a2f2f64336a732e6f72672f6c6f676f2e737667"
        alt="D3 photo"
      />
      
      D3
    </a>
  </h3>
  <p class="article-more pt-1">Bring data to life with SVG, Canvas and HTML. 📊📈🎉</p>
</article>

</li>
              
              <li>
                <div>
                  
    <ins class="adsbygoogle"
      style="display:block"
      data-ad-client="ca-pub-7917632214101949"
      data-ad-slot="6627871389"
      data-ad-format="auto"
      data-full-width-responsive="true"></ins>
    <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script>
  
                </div>
              </li>
            </ul>
          </section>

<section>
            
            
<h2 class="h2 py-3.5">Recommend Topics</h2>
            <ul>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/topic/javascript">
      
      javascript
    </a>
  </h3>
  <p class="article-more pt-1">JavaScript (JS) is a lightweight interpreted programming language with first-class functions.</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/topic/web">
      
      web
    </a>
  </h3>
  <p class="article-more pt-1">Some thing interesting about web. New door for the world.</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/topic/server">
      
      server
    </a>
  </h3>
  <p class="article-more pt-1">A server is a program made to process requests and deliver data to clients.</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/topic/machine-learning">
      
      Machine learning
    </a>
  </h3>
  <p class="article-more pt-1">Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/topic/visualization">
      
      Visualization
    </a>
  </h3>
  <p class="article-more pt-1">Some thing interesting about visualization, use data art</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/topic/game">
      
      Game
    </a>
  </h3>
  <p class="article-more pt-1">Some thing interesting about game, make everyone happy.</p>
</article>

<section>
            
            
<h2 class="h2 py-3.5">Recommend Org</h2>
            <ul>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/facebook">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://avatars.githubusercontent.com/u/69631?v=4"
        alt="Facebook photo"
      />
      
      Facebook
    </a>
  </h3>
  <p class="article-more pt-1">We are working to build community through open source technology. NB: members must have two-factor auth.</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/microsoft">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://avatars.githubusercontent.com/u/6154722?v=4"
        alt="Microsoft photo"
      />
      
      Microsoft
    </a>
  </h3>
  <p class="article-more pt-1">Open source projects and samples from Microsoft.</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/google">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://avatars.githubusercontent.com/u/1342004?v=4"
        alt="Google photo"
      />
      
      Google
    </a>
  </h3>
  <p class="article-more pt-1">Google ❤️ Open Source for everyone.</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/alibaba">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://avatars.githubusercontent.com/u/1961952?v=4"
        alt="Alibaba photo"
      />
      
      Alibaba
    </a>
  </h3>
  <p class="article-more pt-1">Alibaba Open Source for everyone</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/d3">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://avatars.githubusercontent.com/u/1562726?v=4"
        alt="D3 photo"
      />
      
      D3
    </a>
  </h3>
  <p class="article-more pt-1">Data-Driven Documents codes.</p>
</article>

</li>
              
              <li>
                
<article class="small-box">
  <h3 class="article-title">
    <a class="block break-all" href="/tencent">
      
      <img
        loading="lazy"
        class="inline-block w-6 h-6 rounded-md border border-white"
        width="24"
        height="24"
        src="https://avatars.githubusercontent.com/u/18461506?v=4"
        alt="Tencent photo"
      />
      
      Tencent
    </a>
  </h3>
  <p class="article-more pt-1">China tencent open source team.</p>
</article>

</li>
              
              <li>
                
    <ins class="adsbygoogle"
      style="display:block"
      data-ad-client="ca-pub-7917632214101949"
      data-ad-slot="6627871389"
      data-ad-format="auto"
      data-full-width-responsive="true"></ins>
    <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script>
  
              </li>
            </ul>
          </section>
          
          <article class="small-box mt-3">
            <h3 class="article-title">Jobs</h3> 
            <a class="hover:underline" target="_blank" href="https://jooble.org/">Jooble</a>
          </article>
          
        </section>
      </div>
    </div>

<footer class="sizeing text-xs text-center p-5">
  <div>Friends: 
    <a class="hover:underline" target="_blank" href="https://www.chanpinqingbaoju.com">ProductDiscover</a>
  </div>
  Copyright © 2024 GithubHelp  ❤️ <a class="hover:underline block md:inline" href="mailto:cs.victor.edison@gmail.com">Mail to me</a>
</footer>
  </body>
</html>