{"action":"opened","issue":{"url":"https://api.github.com/repos/cure53/DOMPurify/issues/98","labels_url":"https://api.github.com/repos/cure53/DOMPurify/issues/98/labels{/name}","comments_url":"https://api.github.com/repos/cure53/DOMPurify/issues/98/comments","events_url":"https://api.github.com/repos/cure53/DOMPurify/issues/98/events","html_url":"https://github.com/cure53/DOMPurify/issues/98","id":107047676,"number":98,"title":"Reliability after uglification","user":{"login":"cure53","id":6709482,"avatar_url":"https://avatars.githubusercontent.com/u/6709482?v=3","gravatar_id":"","url":"https://api.github.com/users/cure53","html_url":"https://github.com/cure53","followers_url":"https://api.github.com/users/cure53/followers","following_url":"https://api.github.com/users/cure53/following{/other_user}","gists_url":"https://api.github.com/users/cure53/gists{/gist_id}","starred_url":"https://api.github.com/users/cure53/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cure53/subscriptions","organizations_url":"https://api.github.com/users/cure53/orgs","repos_url":"https://api.github.com/users/cure53/repos","events_url":"https://api.github.com/users/cure53/events{/privacy}","received_events_url":"https://api.github.com/users/cure53/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-09-17T18:44:28Z","updated_at":"2015-09-17T18:44:28Z","closed_at":null,"body":"Hi all (cc @tdeekens because potentially affected by this),\r\n\r\nI would like to kick-off a discussion as to whether DOMPurify is reliable after being \"uglified\", \"closureized\" or otherwise optimized and/or compressed. My main concern stems from this article:\r\n\r\n https://zyan.scripts.mit.edu/blog/backdooring-js/\r\n\r\nShould we maybe add this case to our tests? As in, running the tests with an uncompressed DOMPurify but also several versions that are compressed and/or optimized?\r\n\r\nCheers,\r\n.mario"}}