release: 1.0.1

Author: cure53

README.md

@@ -78,12 +78,12 @@ could reach. Pin both with SRI so a bad CDN day fails closed instead of open:
 ```html
 <script
   src="https://cdn.jsdelivr.net/npm/dompurify@3.4.12/dist/purify.min.js"
-  integrity="sha384-piCcpDdJ7qVeK4Tv8Z6Hpcr3ZBIgP16TxQTPVfsLFdZ5uDgwc3Y8Ho7oUnqf12qu"
+  integrity="sha384-46dPGH1XlTmj7bc50bqLjTdORXs/3EP2QpA/6EWbelYWOY9VGp+87RT61S3Mcslb"
   crossorigin="anonymous"
 ></script>
 <script
   src="https://cdn.jsdelivr.net/npm/domfortify@1.0.0/dist/fortify.min.js"
-  integrity="sha384-UTHngTnDjkP35mHLyvskA7klpBRoONpcOpENk+XQEi2plYIGb4WKpYIgci8vV3PG"
+  integrity="sha384-c6Zw5oPYE/XugJ3ElmZEwethwwBKRAKk5RCmtrXmHqlh2bZyvwmMrMo8Ok63rp9a"
   crossorigin="anonymous"
 ></script>
 ```

dist/fortify.cjs.js

@@ -1,4 +1,4 @@
-/*! DOMFortify 1.0.0 | (c) Cure53 and contributors | (MPL-2.0 OR Apache-2.0) */
+/*! DOMFortify 1.0.1 | (c) Cure53 and contributors | (MPL-2.0 OR Apache-2.0) */
 // Cached up front so later prototype pollution or clobbering can't swap hasOwnProperty out.
 const hasOwn = Object.prototype.hasOwnProperty;
 /** True only for an own (non-inherited) property, so a polluted prototype is never consulted. */
@@ -78,7 +78,7 @@ function urlMatches(pattern, url) {
  *  - Fails closed: no sanitizer means sinks throw, never leak.
  *  - Only covers Trusted Types sinks; inline handlers / style / URL props stay open.
  */
-const VERSION = '1.0.0';
+const VERSION = '1.0.1';
 // Natives captured up front, so later prototype pollution or clobbering can't swap them out.
 const root = typeof globalThis !== 'undefined' ? globalThis : window;
 const doc = typeof document !== 'undefined' ? document : undefined;

dist/fortify.es.mjs

@@ -1,6 +1,6 @@
 {
   "name": "domfortify",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Retrofit Trusted Types onto a legacy page: claim the realm's default policy so old DOM-XSS sinks get sanitized without touching the code.",
   "license": "(MPL-2.0 OR Apache-2.0)",
   "homepage": "https://github.com/cure53/DOMFortify",