Cure53🔓cure53@infosec.exchange
Jul 1, 2026, 3:53 PMDuring July & August, we will continue to accept security bug reports for DOMPurify.
If anything serious is found, we will patch it immediately and release an update. As always.
We call this approach the 'summer of responsible OSS maintenance' and prefer it to ignoring security bugs and waiting for Wikifeet to call us.