From 8bc78997820dd42b2fab6f87aa6983e90074d3fd Mon Sep 17 00:00:00 2001 From: Karl Kemister-Sheppard Date: Mon, 27 Jul 2026 10:35:34 +1000 Subject: [PATCH] Docs: TINYDOC-3564 - Sanitizing malformed HTML in the editor content could throw an error --- modules/ROOT/pages/8.8.2-release-notes.adoc | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/modules/ROOT/pages/8.8.2-release-notes.adoc b/modules/ROOT/pages/8.8.2-release-notes.adoc index ee77c44bb3..9c51d24c09 100644 --- a/modules/ROOT/pages/8.8.2-release-notes.adoc +++ b/modules/ROOT/pages/8.8.2-release-notes.adoc @@ -160,6 +160,13 @@ For information on using Enhanced Skins & Icon Packs, see: xref:enhanced-skins-a // CCFR here. +=== Sanitizing malformed HTML in the editor content could throw an error +// #TINYMCE-14701 + +Previously, {productname} could throw an error while sanitizing editor content that contained malformed HTML, and the browser console reported `+TypeError: a node selected for removal could not be detached from its tree and cannot be safely returned; refusing to sanitize in place+`. The error occurred in {productname} 8.8.0 and 8.8.1, which bundled version 3.4.11 of the DOMPurify sanitization library. + +In {productname} {release-version}, {productname} bundles version 3.4.12 of DOMPurify, which resolves the underlying issue. The editor now sanitizes content that contains malformed HTML without throwing an error. + [[security-fixes]] == Security fixes