Merge pull request #898 from cpmotion/issue-897

fix: Avoid TypeError for null values on CUSTOM_ELEMENT_HANDLING config.

Author: cure53

dist/purify.cjs.js

@@ -139,7 +139,7 @@ function clone(object) {
     if (getOwnPropertyDescriptor(object, property) !== undefined) {
       if (Array.isArray(value)) {
         newObject[property] = cleanArray(value);
-      } else if (typeof value === 'object' && value.constructor === Object) {
+      } else if (value && typeof value === 'object' && value.constructor === Object) {
         newObject[property] = clone(value);
       } else {
         newObject[property] = value;

dist/purify.cjs.js.map

@@ -136,7 +136,11 @@ function clone(object) {
     if (getOwnPropertyDescriptor(object, property) !== undefined) {
       if (Array.isArray(value)) {
         newObject[property] = cleanArray(value);
-      } else if (typeof value === 'object' && value.constructor === Object) {
+      } else if (
+        value &&
+        typeof value === 'object' &&
+        value.constructor === Object
+      ) {
         newObject[property] = clone(value);
       } else {
         newObject[property] = value;

dist/purify.es.mjs

@@ -804,6 +804,21 @@
         );
       }
     );
+    QUnit.test(
+      'CUSTOM_ELEMENT_HANDLING config values of null do not throw a TypeError.',
+      function (assert) {
+        DOMPurify.sanitize('', {
+          CUSTOM_ELEMENT_HANDLING: {
+            tagNameCheck: null,
+            attributeNameCheck: null,
+            allowCustomizedBuiltInElements: null,
+          },
+        });
+    
+        // Don't see a great way to assert NOT throws...
+        assert.ok(true);
+      }
+    );
     QUnit.test('Test dirty being an array', function (assert) {
       assert.equal(
         DOMPurify.sanitize(['<a>123<b>456</b></a>']),