ParabolInc · nickoferrall · Aug 14, 2024 · Apr 12, 2024 · Apr 15, 2024 · Apr 16, 2024
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
- ".": "7.43.1"
+ ".": "7.43.2"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,13 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 
 This CHANGELOG follows conventions [outlined here](http://keepachangelog.com/).
 
+## [7.43.2](https://github.com/ParabolInc/parabol/compare/v7.43.1...v7.43.2) (2024-08-14)
+
+
+### Fixed
+
+* email-meeting-summaries ([#10104](https://github.com/ParabolInc/parabol/issues/10104)) ([5debeb9](https://github.com/ParabolInc/parabol/commit/5debeb959c7b6c9fbbf2f8a20a0377bb09efc3e0))
+
 ## [7.43.1](https://github.com/ParabolInc/parabol/compare/v7.43.0...v7.43.1) (2024-08-12)
 
 

diff --git a/package.json b/package.json
@@ -3,7 +3,7 @@
  "description": "An open-source app for building smarter, more agile teams.",
  "author": "Parabol Inc. <love@parabol.co> (http://github.com/ParabolInc)",
  "license": "AGPL-3.0",
- "version": "7.43.1",
+ "version": "7.43.2",
  "repository": {
  "type": "git",
  "url": "https://github.com/ParabolInc/parabol"

diff --git a/packages/chronos/package.json b/packages/chronos/package.json
@@ -1,6 +1,6 @@
 {
  "name": "chronos",
- "version": "7.43.1",
+ "version": "7.43.2",
  "description": "A cron job scheduler",
  "author": "Matt Krick <matt.krick@gmail.com>",
  "homepage": "https://github.com/ParabolInc/parabol/tree/master/packages/chronos#readme",
@@ -25,6 +25,6 @@
  },
  "dependencies": {
  "cron": "^2.3.1",
- "parabol-server": "7.43.1"
+ "parabol-server": "7.43.2"
  }
 }
diff --git a/...t/modules/email/components/SummaryEmail/MeetingSummaryEmail/WholeMeetingSummaryResult.tsx b/...t/modules/email/components/SummaryEmail/MeetingSummaryEmail/WholeMeetingSummaryResult.tsx
@@ -1,8 +1,8 @@
 import graphql from 'babel-plugin-relay/macro'
-import DOMPurify from 'dompurify'
 import {marked} from 'marked'
 import React, {useEffect} from 'react'
 import {useFragment} from 'react-relay'
+import sanitizeHtml from 'sanitize-html'
 import {WholeMeetingSummaryResult_meeting$key} from '../../../../../__generated__/WholeMeetingSummaryResult_meeting.graphql'
 import useAtmosphere from '../../../../../hooks/useAtmosphere'
 import {PALETTE} from '../../../../../styles/paletteV3'
@@ -73,7 +73,7 @@ const WholeMeetingSummaryResult = ({meetingRef}: Props) => {
  gfm: true,
  breaks: true
  }) as string
- const sanitizedSummary = DOMPurify.sanitize(renderedSummary)
+ const sanitizedSummary = sanitizeHtml(renderedSummary)
 
  const explainerText = team?.tier === 'starter' ? AIExplainer.STARTER : AIExplainer.PREMIUM_MEETING
 

diff --git a/packages/client/package.json b/packages/client/package.json
@@ -3,7 +3,7 @@
  "description": "An open-source app for building smarter, more agile teams.",
  "author": "Parabol Inc. <love@parabol.co> (http://github.com/ParabolInc)",
  "license": "AGPL-3.0",
- "version": "7.43.1",
+ "version": "7.43.2",
  "repository": {
  "type": "git",
  "url": "https://github.com/ParabolInc/parabol"
@@ -47,6 +47,7 @@
  "@types/react-textarea-autosize": "^8.0.0",
  "@types/react-virtualized": "^9.21.20",
  "@types/relay-runtime": "^14.1.9",
+ "@types/sanitize-html": "^2.11.0",
  "@types/stripe-v2": "^2.0.1",
  "babel-plugin-relay": "^12.0.0",
  "debug": "^4.1.1",
@@ -139,6 +140,7 @@
  "relay-runtime": "^14.1.0",
  "resize-observer-polyfill": "^1.5.0",
  "rrule": "^2.7.2",
+ "sanitize-html": "^2.13.0",
  "string-score": "^1.0.1",
  "swiper": "^8.3.1",
  "tailwind-merge": "^1.13.2",

diff --git a/packages/embedder/package.json b/packages/embedder/package.json
@@ -1,6 +1,6 @@
 {
  "name": "parabol-embedder",
- "version": "7.43.1",
+ "version": "7.43.2",
  "description": "A service that computes embedding vectors from Parabol objects",
  "author": "Jordan Husney <jordan.husney@gmail.com>",
  "homepage": "https://github.com/ParabolInc/parabol/tree/master/packages/embedder#readme",

diff --git a/packages/gql-executor/package.json b/packages/gql-executor/package.json
@@ -1,6 +1,6 @@
 {
  "name": "gql-executor",
- "version": "7.43.1",
+ "version": "7.43.2",
  "description": "A Stateless GraphQL Executor",
  "author": "Matt Krick <matt.krick@gmail.com>",
  "homepage": "https://github.com/ParabolInc/parabol/tree/master/packages/gqlExecutor#readme",
@@ -27,8 +27,8 @@
  },
  "dependencies": {
  "dd-trace": "^4.2.0",
- "parabol-client": "7.43.1",
- "parabol-server": "7.43.1",
+ "parabol-client": "7.43.2",
+ "parabol-server": "7.43.2",
  "undici": "^5.26.2"
  }
 }
diff --git a/packages/integration-tests/package.json b/packages/integration-tests/package.json
@@ -2,7 +2,7 @@
  "name": "integration-tests",
  "author": "Parabol Inc. <love@parabol.co> (http://github.com/ParabolInc)",
  "license": "AGPL-3.0",
- "version": "7.43.1",
+ "version": "7.43.2",
  "description": "",
  "main": "index.js",
  "scripts": {

diff --git a/packages/server/package.json b/packages/server/package.json
@@ -3,7 +3,7 @@
  "description": "An open-source app for building smarter, more agile teams.",
  "author": "Parabol Inc. <love@parabol.co> (http://github.com/ParabolInc)",
  "license": "AGPL-3.0",
- "version": "7.43.1",
+ "version": "7.43.2",
  "repository": {
  "type": "git",
  "url": "https://github.com/ParabolInc/parabol"
@@ -43,6 +43,7 @@
  "@types/node": "^20.11.17",
  "@types/nodemailer": "^6.4.14",
  "@types/relay-runtime": "^14.1.9",
+ "@types/sanitize-html": "^2.11.0",
  "@types/sharp": "^0.32.0",
  "@types/string-similarity": "^3.0.0",
  "@types/uuid": "^8.3.3",
@@ -123,14 +124,15 @@
  "openai": "^4.53.0",
  "openapi-fetch": "^0.9.7",
  "oy-vey": "^0.12.1",
- "parabol-client": "7.43.1",
+ "parabol-client": "7.43.2",
  "pg": "^8.5.1",
  "react": "^17.0.2",
  "react-dom": "^17.0.2",
  "relay-runtime": "^14.1.0",
  "rethinkdb-ts": "2.6.0",
  "rrule": "^2.7.2",
  "samlify": "^2.8.2",
+ "sanitize-html": "^2.13.0",
  "sharp": "^0.32.6",
  "string-similarity": "^3.0.0",
  "stripe": "^9.13.0",

diff --git a/yarn.lock b/yarn.lock
@@ -9201,6 +9201,13 @@
  resolved "https://registry.yarnpkg.com/@types/retry/-/retry-0.12.2.tgz#ed279a64fa438bb69f2480eda44937912bb7480a"
  integrity sha512-XISRgDJ2Tc5q4TRqvgJtzsRkFYNJzZrhTdtMoGVBttwzzQJkPnS3WWTFc7kuDRoPtPakl+T+OfdEUjYJj7Jbow==
 
+"@types/sanitize-html@^2.11.0":
+ version "2.11.0"
+ resolved "https://registry.yarnpkg.com/@types/sanitize-html/-/sanitize-html-2.11.0.tgz#582d8c72215c0228e3af2be136e40e0b531addf2"
+ integrity sha512-7oxPGNQHXLHE48r/r/qjn7q0hlrs3kL7oZnGj0Wf/h9tj/6ibFyRkNbsDxaBBZ4XUZ0Dx5LGCyDJ04ytSofacQ==
+ dependencies:
+ htmlparser2 "^8.0.0"
+
 "@types/semver@^7.5.0":
  version "7.5.6"
  resolved "https://registry.yarnpkg.com/@types/semver/-/semver-7.5.6.tgz#c65b2bfce1bec346582c07724e3f8c1017a20339"
@@ -10924,9 +10931,9 @@ camelcase@^6.2.0:
  integrity sha512-Gmy6FhYlCY7uOElZUSbxo2UCDH8owEk996gkbrpsgGtrJLM3J7jGxl9Ic7Qwwj4ivOE5AWZWRMecDdF7hqGjFA==
 
 caniuse-lite@^1.0.30001426, caniuse-lite@^1.0.30001517, caniuse-lite@^1.0.30001580, caniuse-lite@^1.0.30001640, caniuse-lite@~1.0.0:
- version "1.0.30001649"
- resolved "https://registry.yarnpkg.com/caniuse-lite/-/caniuse-lite-1.0.30001649.tgz#3ec700309ca0da2b0d3d5fb03c411b191761c992"
- integrity sha512-fJegqZZ0ZX8HOWr6rcafGr72+xcgJKI9oWfDW5DrD7ExUtgZC7a7R7ZYmZqplh7XDocFdGeIFn7roAxhOeYrPQ==
+ version "1.0.30001651"
+ resolved "https://registry.yarnpkg.com/caniuse-lite/-/caniuse-lite-1.0.30001651.tgz#52de59529e8b02b1aedcaaf5c05d9e23c0c28138"
+ integrity sha512-9Cf+Xv1jJNe1xPZLGuUXLNkE1BoDkqRqYyFJ9TDYSqhduqA4hu4oR9HluGoWYQC/aj8WHjsGVV+bwkh0+tegRg==
 
 capital-case@^1.0.4:
  version "1.0.4"
@@ -12428,6 +12435,15 @@ dom-serializer@^1.0.1, dom-serializer@^1.3.2:
  domhandler "^4.2.0"
  entities "^2.0.0"
 
+dom-serializer@^2.0.0:
+ version "2.0.0"
+ resolved "https://registry.yarnpkg.com/dom-serializer/-/dom-serializer-2.0.0.tgz#e41b802e1eedf9f6cae183ce5e622d789d7d8e53"
+ integrity sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==
+ dependencies:
+ domelementtype "^2.3.0"
+ domhandler "^5.0.2"
+ entities "^4.2.0"
+
 dom7@^4.0.4:
  version "4.0.4"
  resolved "https://registry.yarnpkg.com/dom7/-/dom7-4.0.4.tgz#8b68c5d8e5e2ed0fddb1cb93e433bc9060c8f3fb"
@@ -12440,6 +12456,11 @@ domelementtype@^2.0.1, domelementtype@^2.2.0:
  resolved "https://registry.yarnpkg.com/domelementtype/-/domelementtype-2.2.0.tgz#9a0b6c2782ed6a1c7323d42267183df9bd8b1d57"
  integrity sha512-DtBMo82pv1dFtUmHyr48beiuq792Sxohr+8Hm9zoxklYPfa6n0Z3Byjj2IV7bmr2IyqClnqEQhfgHJJ5QF0R5A==
 
+domelementtype@^2.3.0:
+ version "2.3.0"
+ resolved "https://registry.yarnpkg.com/domelementtype/-/domelementtype-2.3.0.tgz#5c45e8e869952626331d7aab326d01daf65d589d"
+ integrity sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==
+
 domexception@^4.0.0:
  version "4.0.0"
  resolved "https://registry.npmmirror.com/domexception/-/domexception-4.0.0.tgz#4ad1be56ccadc86fc76d033353999a8037d03673"
@@ -12454,6 +12475,13 @@ domhandler@^4.0.0, domhandler@^4.2.0, domhandler@^4.3.0:
  dependencies:
  domelementtype "^2.2.0"
 
+domhandler@^5.0.2, domhandler@^5.0.3:
+ version "5.0.3"
+ resolved "https://registry.yarnpkg.com/domhandler/-/domhandler-5.0.3.tgz#cc385f7f751f1d1fc650c21374804254538c7d31"
+ integrity sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==
+ dependencies:
+ domelementtype "^2.3.0"
+
 dompurify@^2.4.1:
  version "2.4.1"
  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.4.1.tgz#f9cb1a275fde9af6f2d0a2644ef648dd6847b631"
@@ -12468,6 +12496,15 @@ domutils@^2.5.2, domutils@^2.7.0, domutils@^2.8.0:
  domelementtype "^2.2.0"
  domhandler "^4.2.0"
 
+domutils@^3.0.1:
+ version "3.1.0"
+ resolved "https://registry.yarnpkg.com/domutils/-/domutils-3.1.0.tgz#c47f551278d3dc4b0b1ab8cbb42d751a6f0d824e"
+ integrity sha512-H78uMmQtI2AhgDJjWeQmHwJJ2bLPD3GMmO7Zja/ZZh84wkm+4ut+IUnUdRa8uCGX88DiVx1j6FRe1XfxEgjEZA==
+ dependencies:
+ dom-serializer "^2.0.0"
+ domelementtype "^2.3.0"
+ domhandler "^5.0.3"
+
 dot-case@^3.0.4:
  version "3.0.4"
  resolved "https://registry.yarnpkg.com/dot-case/-/dot-case-3.0.4.tgz#9b2b670d00a431667a8a75ba29cd1b98809ce751"
@@ -12705,6 +12742,11 @@ entities@^2.0.0:
  resolved "https://registry.yarnpkg.com/entities/-/entities-2.2.0.tgz#098dc90ebb83d8dffa089d55256b351d34c4da55"
  integrity sha512-p92if5Nz619I0w+akJrLZH0MX0Pb5DX39XOwQTtXSdQQOaYH03S1uIQp4mhOZtAXrxq4ViO67YTiLBo2638o9A==
 
+entities@^4.2.0:
+ version "4.5.0"
+ resolved "https://registry.yarnpkg.com/entities/-/entities-4.5.0.tgz#5d268ea5e7113ec74c4d033b79ea5a35a488fb48"
+ integrity sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==
+
 entities@^4.4.0:
  version "4.4.0"
  resolved "https://registry.yarnpkg.com/entities/-/entities-4.4.0.tgz#97bdaba170339446495e653cfd2db78962900174"
@@ -14546,6 +14588,16 @@ htmlparser2@^6.1.0:
  domutils "^2.5.2"
  entities "^2.0.0"
 
+htmlparser2@^8.0.0:
+ version "8.0.2"
+ resolved "https://registry.yarnpkg.com/htmlparser2/-/htmlparser2-8.0.2.tgz#f002151705b383e62433b5cf466f5b716edaec21"
+ integrity sha512-GYdjWKDkbRLkZ5geuHs5NY1puJ+PXwP7+fHPRz06Eirsb9ugf6d8kkXav6ADhcODhFFPMIXyxkxSuMf3D6NCFA==
+ dependencies:
+ domelementtype "^2.3.0"
+ domhandler "^5.0.3"
+ domutils "^3.0.1"
+ entities "^4.4.0"
+
 http-cache-semantics@^4.1.0:
  version "4.1.1"
  resolved "https://registry.yarnpkg.com/http-cache-semantics/-/http-cache-semantics-4.1.1.tgz#abe02fcb2985460bf0323be664436ec3476a6d5a"
@@ -17386,7 +17438,7 @@ nan@^2.18.0:
  resolved "https://registry.yarnpkg.com/nan/-/nan-2.19.0.tgz#bb58122ad55a6c5bc973303908d5b16cfdd5a8c0"
  integrity sha512-nO1xXxfh/RWNxfd/XPfbIfFk5vgLsAxUR9y5O0cHMJu/AW9U95JLXqthYHjEp+8gQ5p96K9jUp8nbVOxCdRbtw==
 
-nanoid@^3.1.31, nanoid@^3.3.6:
+nanoid@^3.1.31, nanoid@^3.3.6, nanoid@^3.3.7:
  version "3.3.7"
  resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.3.7.tgz#d0c301a691bc8d54efa0a2226ccf3fe2fd656bd8"
  integrity sha512-eSRppjcPIatRIMC1U6UngP8XFcz8MQWGQdt1MTBQ7NaAmvXDfvNxbvWV3x2y6CdEUciCSsDHDQZbhYaB8QEo2g==
@@ -18477,6 +18529,11 @@ parse-path@^7.0.0:
  dependencies:
  protocols "^2.0.0"
 
+parse-srcset@^1.0.2:
+ version "1.0.2"
+ resolved "https://registry.yarnpkg.com/parse-srcset/-/parse-srcset-1.0.2.tgz#f2bd221f6cc970a938d88556abc589caaaa2bde1"
+ integrity sha512-/2qh0lav6CmI15FzA3i/2Bzk2zCgQhGMkvhOhKNcBVQ1ldgpbfiNTVslmooUmWJcADi1f1kIeynbDRVzNlfR6Q==
+
 parse-url@^7.0.2, parse-url@^8.1.0:
  version "8.1.0"
  resolved "https://registry.yarnpkg.com/parse-url/-/parse-url-8.1.0.tgz#972e0827ed4b57fc85f0ea6b0d839f0d8a57a57d"
@@ -18975,6 +19032,15 @@ postcss@^8.0.9, postcss@^8.1.4, postcss@^8.4.21:
  picocolors "^1.0.0"
  source-map-js "^1.0.2"
 
+postcss@^8.3.11:
+ version "8.4.41"
+ resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.4.41.tgz#d6104d3ba272d882fe18fc07d15dc2da62fa2681"
+ integrity sha512-TesUflQ0WKZqAvg52PWL6kHgLKP6xB6heTOdoYM0Wt2UHyxNa4K25EZZMgKns3BH1RLVbZCREPpLY0rhnNoHVQ==
+ dependencies:
+ nanoid "^3.3.7"
+ picocolors "^1.0.1"
+ source-map-js "^1.2.0"
+
 postgres-array@~2.0.0:
  version "2.0.0"
  resolved "https://registry.yarnpkg.com/postgres-array/-/postgres-array-2.0.0.tgz#48f8fce054fbc69671999329b8834b772652d82e"
@@ -20480,6 +20546,18 @@ samlify@^2.8.2:
  xml-crypto "^2.1.3"
  xpath "^0.0.32"
 
+sanitize-html@^2.13.0:
+ version "2.13.0"
+ resolved "https://registry.yarnpkg.com/sanitize-html/-/sanitize-html-2.13.0.tgz#71aedcdb777897985a4ea1877bf4f895a1170dae"
+ integrity sha512-Xff91Z+4Mz5QiNSLdLWwjgBDm5b1RU6xBT0+12rapjiaR7SwfRdjw8f+6Rir2MXKLrDicRFHdb51hGOAxmsUIA==
+ dependencies:
+ deepmerge "^4.2.2"
+ escape-string-regexp "^4.0.0"
+ htmlparser2 "^8.0.0"
+ is-plain-object "^5.0.0"
+ parse-srcset "^1.0.2"
+ postcss "^8.3.11"
+
 sanitizer@^0.1.3:
  version "0.1.3"
  resolved "https://registry.yarnpkg.com/sanitizer/-/sanitizer-0.1.3.tgz#d4f0af7475d9a7baf2a9e5a611718baa178a39e1"
@@ -20992,6 +21070,11 @@ source-map-js@^1.0.2:
  resolved "https://registry.yarnpkg.com/source-map-js/-/source-map-js-1.0.2.tgz#adbc361d9c62df380125e7f161f71c826f1e490c"
  integrity sha512-R0XvVJ9WusLiqTCEiGCmICCMplcCkIwwR11mOSD9CR5u+IXYdiseeEuXCVAjS54zqwkLcPNnmU4OeJ6tUrWhDw==
 
+source-map-js@^1.2.0:
+ version "1.2.0"
+ resolved "https://registry.yarnpkg.com/source-map-js/-/source-map-js-1.2.0.tgz#16b809c162517b5b8c3e7dcd315a2a5c2612b2af"
+ integrity sha512-itJW8lvSA0TXEphiRoawsCksnlf8SyvmFzIhltqAHluXd88pkCd+cXJVHTDwdCr0IzwptSm035IHQktUu1QUMg==
+
 source-map-support@0.5.13:
  version "0.5.13"
  resolved "https://registry.yarnpkg.com/source-map-support/-/source-map-support-0.5.13.tgz#31b24a9c2e73c2de85066c0feb7d44767ed52932"