diff --git a/composer.json b/composer.json
index a8f0fee..4dc8d9b 100644
--- a/composer.json
+++ b/composer.json
@@ -72,7 +72,7 @@
 		"yiisoft/yii2-composer": "*",
 		"yiisoft/jquery": "1.10.*",
 		"phpspec/php-diff": ">=1.0.2",
-		"ezyang/htmlpurifier": "4.5.*",
+		"ezyang/htmlpurifier": "4.6.*",
 		"michelf/php-markdown": "1.3.*"
 	},
 	"require-dev": {
diff --git a/docs/guide/composer.md b/docs/guide/composer.md
index 8abef5a..c2ab172 100644
--- a/docs/guide/composer.md
+++ b/docs/guide/composer.md
@@ -28,7 +28,7 @@ In this file you list the packages that your application requires. For Yii sites
 {
     "require": {
         "Michelf/php-markdown": ">=1.3",
-        "ezyang/htmlpurifier": ">=4.5.0"
+        "ezyang/htmlpurifier": ">=4.6.0"
     }
 }
 ```
diff --git a/docs/guide/view.md b/docs/guide/view.md
index 1c04b99..bde7706 100644
--- a/docs/guide/view.md
+++ b/docs/guide/view.md
@@ -90,7 +90,7 @@ When you want to render HTML it becomes complex so we're delegating the task to
 adding the following to `require`:
 
 ```javascript
-"ezyang/htmlpurifier": "v4.5.0"
+"ezyang/htmlpurifier": "v4.6.0"
 ```
 
 After it's done run `php composer.phar install` and wait till package is downloaded. Now everything is prepared to use
diff --git a/framework/CHANGELOG.md b/framework/CHANGELOG.md
index aba35d5..c5879d1 100644
--- a/framework/CHANGELOG.md
+++ b/framework/CHANGELOG.md
@@ -57,6 +57,7 @@ Yii Framework 2 Change Log
 - Chg: Renamed `attributeName` and `className` to `targetAttribute` and `targetClass` for `UniqueValidator` and `ExistValidator` (qiangxue)
 - Chg: Added `yii\widgets\InputWidget::options` (qiangxue)
 - Chg: Changed the signature of `urlCreator` and button creators for `yii\gridview\ActionColumn` (qiangxue)
+- Chg: Updated HTMLPurified dependency to `4.6.*`.
 - New #1438: [MongoDB integration](https://github.com/yiisoft/yii2-mongodb) ActiveRecord and Query (klimov-paul)
 - New #1393: [Codeception testing framework integration](https://github.com/yiisoft/yii2-codeception) (Ragazzo)
 
diff --git a/framework/composer.json b/framework/composer.json
index bcd3927..d3ed7e7 100644
--- a/framework/composer.json
+++ b/framework/composer.json
@@ -55,7 +55,7 @@
 		"yiisoft/yii2-composer": "*",
 		"yiisoft/jquery": "1.10.*",
 		"phpspec/php-diff": ">=1.0.2",
-		"ezyang/htmlpurifier": "4.5.*",
+		"ezyang/htmlpurifier": "4.6.*",
 		"michelf/php-markdown": "1.3.*"
 	},
 	"autoload": {