diff --git a/dist/purify.cjs.js b/dist/purify.cjs.js index 91b993d6..2158af2b 100644 --- a/dist/purify.cjs.js +++ b/dist/purify.cjs.js @@ -1582,7 +1582,7 @@ function createDOMPurify() { * @param tagName the node's transformCaseFunc'd tag name * @return true if the node was removed, false if kept */ - const _sanitizeDisallowedNode = function _sanitizeDisallowedNode(currentNode, tagName) { + const _sanitizeDisallowedNode = function _sanitizeDisallowedNode(currentNode, tagName, root) { /* Check if we have a custom element to handle */ if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) { if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)) { @@ -1605,27 +1605,26 @@ function createDOMPurify() { const childNodes = getChildNodes(currentNode); if (childNodes && parentNode) { const childCount = childNodes.length; - /* In-place: hoist the *original* children so the iterator visits - and sanitises them through the same allowlist pass as every other - node. The caller built the tree in the live document, so the - originals carry already-queued resource events (``, - `