NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Packagist · #1129 most downloaded on Packagist
HTML sanitizer aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.
Last release 4 months ago
08 Jun 2026
Release timing varies
gaps range from 3 weeks to 1.8 years
Some releases are documented
notes for 10 of 38 stable releases
Nothing withdrawn
no release was ever pulled
5 years old
38 releases · first in 2021
[SECURITY] Mitigate raw-text bypass with ALLOW_INSECURE_RAW_TEXT by @ohader in #128
Full Changelog: v2.3.1...v2.3.2
Revert "[!!!][TASK] Remove deprecated CommonBuilder->srcsetAttr ( #119 )" by @ohader in #126
Full Changelog: v2.3.0...v2.3.1
One column per quarter.
[!!!][TASK] Remove deprecated CommonBuilder->srcsetAttr by @lolli42 in #119
Full Changelog: v2.2.0...v2.3.0
PHP 8.4 compatibility by @lolli42 in #117
[TASK] Disable test for unicode non breaking spaces substitution by @ohader in #112
Full Changelog: v2.1.3...v2.1.4
[TASK] Drop replacement of unicode non breaking spaces by @bnf in #110
Full Changelog: v2.1.2...v2.1.3
Sanitizer constructor documents array instead of spread by @dpi in #108
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
[TASK] Disable test for unicode non breaking spaces substitution by @ohader in #113
[TASK] Drop replacement of unicode non breaking spaces by @bnf in #111
Full Changelog: v1.5.1...v1.5.2
[SECURITY] Properly encode noscript child nodes by @ohader & @bnf in 090fb6d
Full Changelog: v1.5.0...v1.5.1
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →