fix: Added better configurability for new comment behavior

Author: cure53

dist/purify.cjs.js

@@ -1205,8 +1205,8 @@ function createDOMPurify() {
  continue;
  }
 
- /* Work around a security issue with comments inside attribites */
- if (regExpTest(/(--!?|])>/i, value)) {
+ /* Work around a security issue with comments inside attributes */
+ if (SAFE_FOR_XML && regExpTest(/(--!?|])>/i, value)) {
  _removeAttribute(name, currentNode);
  continue;
  }

dist/purify.cjs.js.map

@@ -1311,8 +1311,8 @@ function createDOMPurify(window = getGlobal()) {
  continue;
  }
 
- /* Work around a security issue with comments inside attribites */
- if (regExpTest(/(--!?|])>/i, value)) {
+ /* Work around a security issue with comments inside attributes */
+ if (SAFE_FOR_XML && regExpTest(/(--!?|])>/i, value)) {
  _removeAttribute(name, currentNode);
  continue;
  }