isomorphic-dompurify 3.0.0-rc.1 → 3.0.0-rc.2

package/README.md

@@ -27,6 +27,7 @@ It was inspired by [Isomorphic Unfetch](https://github.com/developit/unfetch/tre
 | `>=1.10.0`  | `>=18`  | Server  |
 | `>=2.27.0`  | `>=20`  | Server  |
 | `>=2.30.0`  | `>=20.19.5`  | Server  |
+| `>=3.0.0`  | `^20.19.0 \|\| ^22.12.0 \|\| >=24.0.0`  | Server  |
 
 ## Installation
 
@@ -58,6 +59,24 @@ import { sanitize } from "isomorphic-dompurify";
 const clean = sanitize(dirtyString);
 ```
 
+## Memory Management (Server)
+
+In long-running Node.js processes, the internal jsdom window accumulates DOM state across sanitization calls, which can cause progressive slowdown and memory growth. Use `clearWindow()` to periodically release these resources:
+
+```javascript
+import { sanitize, clearWindow } from "isomorphic-dompurify";
+
+// Sanitize as usual
+const clean = sanitize(dirtyString);
+
+// Release jsdom resources when appropriate (e.g. after a request, after a batch)
+clearWindow();
+```
+
+`clearWindow()` closes the current jsdom window and creates a fresh one. All import styles (default and named) continue to work after calling it.
+
+> **Note:** Any hooks or config set via `addHook`/`setConfig` will need to be re-applied after calling `clearWindow()`. In the browser build, `clearWindow()` is a no-op.
+
 ## Web Worker Support
 
 The `isomorphic-dompurify` library is [compatible with Web Workers](https://github.com/kkomelin/isomorphic-dompurify/pull/242), 

package/dist/browser.d.mts

@@ -40,5 +40,6 @@ declare const clearConfig: () => void;
 declare const isValidAttribute: (tag: string, attr: string, value: string) => boolean;
 declare const version: string;
 declare const removed: (dompurify.RemovedElement | dompurify.RemovedAttribute)[];
+declare function clearWindow(): void;
 
-export { addHook, clearConfig, isSupported, isValidAttribute, removeAllHooks, removeHook, removeHooks, removed, sanitize, setConfig, version };
+export { addHook, clearConfig, clearWindow, isSupported, isValidAttribute, removeAllHooks, removeHook, removeHooks, removed, sanitize, setConfig, version };

package/dist/browser.d.ts

@@ -40,5 +40,6 @@ declare const clearConfig: () => void;
 declare const isValidAttribute: (tag: string, attr: string, value: string) => boolean;
 declare const version: string;
 declare const removed: (dompurify.RemovedElement | dompurify.RemovedAttribute)[];
+declare function clearWindow(): void;
 
-export { addHook, clearConfig, isSupported, isValidAttribute, removeAllHooks, removeHook, removeHooks, removed, sanitize, setConfig, version };
+export { addHook, clearConfig, clearWindow, isSupported, isValidAttribute, removeAllHooks, removeHook, removeHooks, removed, sanitize, setConfig, version };

package/dist/browser.js

@@ -32,6 +32,7 @@ var browser_exports = {};
 __export(browser_exports, {
   addHook: () => addHook,
   clearConfig: () => clearConfig,
+  clearWindow: () => clearWindow,
   default: () => browser_default,
   isSupported: () => isSupported,
   isValidAttribute: () => isValidAttribute,
@@ -57,10 +58,13 @@ var clearConfig = import_dompurify.default.clearConfig.bind(import_dompurify.def
 var isValidAttribute = import_dompurify.default.isValidAttribute.bind(import_dompurify.default);
 var version = import_dompurify.default.version;
 var removed = import_dompurify.default.removed;
+function clearWindow() {
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   addHook,
   clearConfig,
+  clearWindow,
   isSupported,
   isValidAttribute,
   removeAllHooks,

package/dist/browser.mjs

@@ -12,9 +12,12 @@ var clearConfig = DOMPurify.clearConfig.bind(DOMPurify);
 var isValidAttribute = DOMPurify.isValidAttribute.bind(DOMPurify);
 var version = DOMPurify.version;
 var removed = DOMPurify.removed;
+function clearWindow() {
+}
 export {
   addHook,
   clearConfig,
+  clearWindow,
   browser_default as default,
   isSupported,
   isValidAttribute,

package/dist/index.d.mts

@@ -1,45 +1,19 @@
-import * as trusted_types_lib from 'trusted-types/lib';
 import * as dompurify from 'dompurify';
 import { DOMPurify as DOMPurify$1 } from 'dompurify';
 
 declare const DOMPurify: DOMPurify$1;
 
-declare const sanitize: {
-    (dirty: string | Node, cfg: dompurify.Config & {
-        RETURN_TRUSTED_TYPE: true;
-    }): trusted_types_lib.TrustedHTML;
-    (dirty: Node, cfg: dompurify.Config & {
-        IN_PLACE: true;
-    }): Node;
-    (dirty: string | Node, cfg: dompurify.Config & {
-        RETURN_DOM: true;
-    }): Node;
-    (dirty: string | Node, cfg: dompurify.Config & {
-        RETURN_DOM_FRAGMENT: true;
-    }): DocumentFragment;
-    (dirty: string | Node, cfg?: dompurify.Config): string;
-};
+declare const sanitize: DOMPurify$1["sanitize"];
 declare const isSupported: boolean;
-declare const addHook: {
-    (entryPoint: "beforeSanitizeElements" | "afterSanitizeElements" | "uponSanitizeShadowNode", hookFunction: dompurify.NodeHook): void;
-    (entryPoint: "beforeSanitizeAttributes" | "afterSanitizeAttributes", hookFunction: dompurify.ElementHook): void;
-    (entryPoint: "beforeSanitizeShadowDOM" | "afterSanitizeShadowDOM", hookFunction: dompurify.DocumentFragmentHook): void;
-    (entryPoint: "uponSanitizeElement", hookFunction: dompurify.UponSanitizeElementHook): void;
-    (entryPoint: "uponSanitizeAttribute", hookFunction: dompurify.UponSanitizeAttributeHook): void;
-};
-declare const removeHook: {
-    (entryPoint: "beforeSanitizeElements" | "afterSanitizeElements" | "uponSanitizeShadowNode", hookFunction?: dompurify.NodeHook): dompurify.NodeHook | undefined;
-    (entryPoint: "beforeSanitizeAttributes" | "afterSanitizeAttributes", hookFunction?: dompurify.ElementHook): dompurify.ElementHook | undefined;
-    (entryPoint: "beforeSanitizeShadowDOM" | "afterSanitizeShadowDOM", hookFunction?: dompurify.DocumentFragmentHook): dompurify.DocumentFragmentHook | undefined;
-    (entryPoint: "uponSanitizeElement", hookFunction?: dompurify.UponSanitizeElementHook): dompurify.UponSanitizeElementHook | undefined;
-    (entryPoint: "uponSanitizeAttribute", hookFunction?: dompurify.UponSanitizeAttributeHook): dompurify.UponSanitizeAttributeHook | undefined;
-};
-declare const removeHooks: (entryPoint: dompurify.HookName) => void;
-declare const removeAllHooks: () => void;
-declare const setConfig: (cfg?: dompurify.Config) => void;
-declare const clearConfig: () => void;
-declare const isValidAttribute: (tag: string, attr: string, value: string) => boolean;
+declare const addHook: DOMPurify$1["addHook"];
+declare const removeHook: DOMPurify$1["removeHook"];
+declare const removeHooks: DOMPurify$1["removeHooks"];
+declare const removeAllHooks: DOMPurify$1["removeAllHooks"];
+declare const setConfig: DOMPurify$1["setConfig"];
+declare const clearConfig: DOMPurify$1["clearConfig"];
+declare const isValidAttribute: DOMPurify$1["isValidAttribute"];
 declare const version: string;
 declare const removed: (dompurify.RemovedElement | dompurify.RemovedAttribute)[];
+declare function clearWindow(): void;
 
-export { addHook, clearConfig, DOMPurify as default, isSupported, isValidAttribute, removeAllHooks, removeHook, removeHooks, removed, sanitize, setConfig, version };
+export { addHook, clearConfig, clearWindow, DOMPurify as default, isSupported, isValidAttribute, removeAllHooks, removeHook, removeHooks, removed, sanitize, setConfig, version };

package/dist/index.d.ts

@@ -1,45 +1,19 @@
-import * as trusted_types_lib from 'trusted-types/lib';
 import * as dompurify from 'dompurify';
 import { DOMPurify as DOMPurify$1 } from 'dompurify';
 
 declare const DOMPurify: DOMPurify$1;
 
-declare const sanitize: {
-    (dirty: string | Node, cfg: dompurify.Config & {
-        RETURN_TRUSTED_TYPE: true;
-    }): trusted_types_lib.TrustedHTML;
-    (dirty: Node, cfg: dompurify.Config & {
-        IN_PLACE: true;
-    }): Node;
-    (dirty: string | Node, cfg: dompurify.Config & {
-        RETURN_DOM: true;
-    }): Node;
-    (dirty: string | Node, cfg: dompurify.Config & {
-        RETURN_DOM_FRAGMENT: true;
-    }): DocumentFragment;
-    (dirty: string | Node, cfg?: dompurify.Config): string;
-};
+declare const sanitize: DOMPurify$1["sanitize"];
 declare const isSupported: boolean;
-declare const addHook: {
-    (entryPoint: "beforeSanitizeElements" | "afterSanitizeElements" | "uponSanitizeShadowNode", hookFunction: dompurify.NodeHook): void;
-    (entryPoint: "beforeSanitizeAttributes" | "afterSanitizeAttributes", hookFunction: dompurify.ElementHook): void;
-    (entryPoint: "beforeSanitizeShadowDOM" | "afterSanitizeShadowDOM", hookFunction: dompurify.DocumentFragmentHook): void;
-    (entryPoint: "uponSanitizeElement", hookFunction: dompurify.UponSanitizeElementHook): void;
-    (entryPoint: "uponSanitizeAttribute", hookFunction: dompurify.UponSanitizeAttributeHook): void;
-};
-declare const removeHook: {
-    (entryPoint: "beforeSanitizeElements" | "afterSanitizeElements" | "uponSanitizeShadowNode", hookFunction?: dompurify.NodeHook): dompurify.NodeHook | undefined;
-    (entryPoint: "beforeSanitizeAttributes" | "afterSanitizeAttributes", hookFunction?: dompurify.ElementHook): dompurify.ElementHook | undefined;
-    (entryPoint: "beforeSanitizeShadowDOM" | "afterSanitizeShadowDOM", hookFunction?: dompurify.DocumentFragmentHook): dompurify.DocumentFragmentHook | undefined;
-    (entryPoint: "uponSanitizeElement", hookFunction?: dompurify.UponSanitizeElementHook): dompurify.UponSanitizeElementHook | undefined;
-    (entryPoint: "uponSanitizeAttribute", hookFunction?: dompurify.UponSanitizeAttributeHook): dompurify.UponSanitizeAttributeHook | undefined;
-};
-declare const removeHooks: (entryPoint: dompurify.HookName) => void;
-declare const removeAllHooks: () => void;
-declare const setConfig: (cfg?: dompurify.Config) => void;
-declare const clearConfig: () => void;
-declare const isValidAttribute: (tag: string, attr: string, value: string) => boolean;
+declare const addHook: DOMPurify$1["addHook"];
+declare const removeHook: DOMPurify$1["removeHook"];
+declare const removeHooks: DOMPurify$1["removeHooks"];
+declare const removeAllHooks: DOMPurify$1["removeAllHooks"];
+declare const setConfig: DOMPurify$1["setConfig"];
+declare const clearConfig: DOMPurify$1["clearConfig"];
+declare const isValidAttribute: DOMPurify$1["isValidAttribute"];
 declare const version: string;
 declare const removed: (dompurify.RemovedElement | dompurify.RemovedAttribute)[];
+declare function clearWindow(): void;
 
-export { addHook, clearConfig, DOMPurify as default, isSupported, isValidAttribute, removeAllHooks, removeHook, removeHooks, removed, sanitize, setConfig, version };
+export { addHook, clearConfig, clearWindow, DOMPurify as default, isSupported, isValidAttribute, removeAllHooks, removeHook, removeHooks, removed, sanitize, setConfig, version };

package/dist/index.js

@@ -32,6 +32,7 @@ var src_exports = {};
 __export(src_exports, {
   addHook: () => addHook,
   clearConfig: () => clearConfig,
+  clearWindow: () => clearWindow,
   default: () => src_default,
   isSupported: () => isSupported,
   isValidAttribute: () => isValidAttribute,
@@ -46,24 +47,36 @@ __export(src_exports, {
 module.exports = __toCommonJS(src_exports);
 var import_dompurify = __toESM(require("dompurify"));
 var import_jsdom = require("jsdom");
-var { window } = new import_jsdom.JSDOM("<!DOCTYPE html>");
-var DOMPurify = (0, import_dompurify.default)(window);
+var window = new import_jsdom.JSDOM("<!DOCTYPE html>").window;
+var purify = (0, import_dompurify.default)(window);
+var DOMPurify = new Proxy({}, {
+  get(_, prop) {
+    const value = purify[prop];
+    return typeof value === "function" ? value.bind(purify) : value;
+  }
+});
 var src_default = DOMPurify;
-var sanitize = DOMPurify.sanitize.bind(DOMPurify);
+var sanitize = ((dirty, config) => purify.sanitize(dirty, config));
 var isSupported = DOMPurify.isSupported;
-var addHook = DOMPurify.addHook.bind(DOMPurify);
-var removeHook = DOMPurify.removeHook.bind(DOMPurify);
-var removeHooks = DOMPurify.removeHooks.bind(DOMPurify);
-var removeAllHooks = DOMPurify.removeAllHooks.bind(DOMPurify);
-var setConfig = DOMPurify.setConfig.bind(DOMPurify);
-var clearConfig = DOMPurify.clearConfig.bind(DOMPurify);
-var isValidAttribute = DOMPurify.isValidAttribute.bind(DOMPurify);
+var addHook = ((entryPoint, hookFunction) => purify.addHook(entryPoint, hookFunction));
+var removeHook = ((entryPoint) => purify.removeHook(entryPoint));
+var removeHooks = ((entryPoint) => purify.removeHooks(entryPoint));
+var removeAllHooks = (() => purify.removeAllHooks());
+var setConfig = ((config) => purify.setConfig(config));
+var clearConfig = (() => purify.clearConfig());
+var isValidAttribute = ((tag, attr, value) => purify.isValidAttribute(tag, attr, value));
 var version = DOMPurify.version;
 var removed = DOMPurify.removed;
+function clearWindow() {
+  window.close();
+  window = new import_jsdom.JSDOM("<!DOCTYPE html>").window;
+  purify = (0, import_dompurify.default)(window);
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   addHook,
   clearConfig,
+  clearWindow,
   isSupported,
   isValidAttribute,
   removeAllHooks,

package/dist/index.mjs

@@ -1,23 +1,35 @@
 // src/index.ts
 import DOMPurifyFactory from "dompurify";
 import { JSDOM } from "jsdom";
-var { window } = new JSDOM("<!DOCTYPE html>");
-var DOMPurify = DOMPurifyFactory(window);
+var window = new JSDOM("<!DOCTYPE html>").window;
+var purify = DOMPurifyFactory(window);
+var DOMPurify = new Proxy({}, {
+  get(_, prop) {
+    const value = purify[prop];
+    return typeof value === "function" ? value.bind(purify) : value;
+  }
+});
 var src_default = DOMPurify;
-var sanitize = DOMPurify.sanitize.bind(DOMPurify);
+var sanitize = ((dirty, config) => purify.sanitize(dirty, config));
 var isSupported = DOMPurify.isSupported;
-var addHook = DOMPurify.addHook.bind(DOMPurify);
-var removeHook = DOMPurify.removeHook.bind(DOMPurify);
-var removeHooks = DOMPurify.removeHooks.bind(DOMPurify);
-var removeAllHooks = DOMPurify.removeAllHooks.bind(DOMPurify);
-var setConfig = DOMPurify.setConfig.bind(DOMPurify);
-var clearConfig = DOMPurify.clearConfig.bind(DOMPurify);
-var isValidAttribute = DOMPurify.isValidAttribute.bind(DOMPurify);
+var addHook = ((entryPoint, hookFunction) => purify.addHook(entryPoint, hookFunction));
+var removeHook = ((entryPoint) => purify.removeHook(entryPoint));
+var removeHooks = ((entryPoint) => purify.removeHooks(entryPoint));
+var removeAllHooks = (() => purify.removeAllHooks());
+var setConfig = ((config) => purify.setConfig(config));
+var clearConfig = (() => purify.clearConfig());
+var isValidAttribute = ((tag, attr, value) => purify.isValidAttribute(tag, attr, value));
 var version = DOMPurify.version;
 var removed = DOMPurify.removed;
+function clearWindow() {
+  window.close();
+  window = new JSDOM("<!DOCTYPE html>").window;
+  purify = DOMPurifyFactory(window);
+}
 export {
   addHook,
   clearConfig,
+  clearWindow,
   src_default as default,
   isSupported,
   isValidAttribute,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "isomorphic-dompurify",
-  "version": "3.0.0-rc.1",
+  "version": "3.0.0-rc.2",
   "description": "Makes it possible to use DOMPurify on server and client in the same way.",
   "keywords": [
     "security",
@@ -16,10 +16,6 @@
     "sanitize-html",
     "sanitizer"
   ],
-  "scripts": {
-    "build": "tsup",
-    "test": "vitest run"
-  },
   "bugs": {
     "url": "https://github.com/kkomelin/isomorphic-dompurify/issues"
   },
@@ -70,8 +66,11 @@
     "typescript": "^5.9.3",
     "vitest": "^4.0.16"
   },
-  "packageManager": "pnpm@10.28.2",
   "engines": {
     "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "NODE_OPTIONS='--expose-gc' vitest run"
   }
-}
+}