🐞 Bug fixes
- Fix an unclosed disallowed tag in one attribution erasing the other attributions, by sanitizing each attribution before joining them (#8571) (by @sx4im)
- Sanitize attribution with an allow list of tags and attributes rather than a list of known-dangerous ones (#8532) (by @HarelM)
- Insert sanitized attribution HTML as DOM nodes instead of re-parsing a serialized string (#8528) (by @cherenkov)
- Fix DOM sanitization for iframe and srcdoc (#8396) (by @HarelM)
- Fix
DOM.sanitizeleaving dangerous attributes behind when multiple consecutive attributes are present (#8189) (by @0xKirisame)