[Snyk] Security upgrade dompurify from 3.0.2 to 3.1.3

[SharonKoch]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	703/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.2	Cross-site Scripting (XSS) SNYK-JS-DOMPURIFY-8184974	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: dompurify

The new version differs by 179 commits.

• 3fe78d7 chore: Preparing 3.1.3 release
• b20ce99 fix: Added smaller-than-null check for __depth hardening code
• 1e52026 fix: Hardened the depth tracking code against prototype pollution
• 8df72f1 fix: Made the regex for comment scrubbing a bit stricter
• ae517d6 fix: Expanded the comment scrubbing regex matching a bit further
• b6818ce fix: Added better configurability for new comment behavior
• aafd7a8 docs: Changed inline comments slightly to be more accurate
• a377bf8 test: Fixed the tests
• d1d5d22 fix: Added experiemental comment scrubbing inside attributes
• dc61232 fix Clarify JSON types and their uses ampproject/amphtml#949
• 0b63a98 Merge pull request AMP List element skeleton. ampproject/amphtml#948 from ssi02014/refac/purify
• c68783e refac: refactoring nodeType by adding a NODE_TYPE object
• abb21f8 fix: Added experimental change to prohibit __depth clobbering
• 705ad8e Merge branch 'main' of github.com:cure53/DOMPurify
• 7422567 fix: Added experimental clobbering check after removal
• fbfd2b7 Update README.md with latest shout outs
• 74664db chore: Updated package-lock.json with new release number
• 5f17b27 chore: Preparing 3.1.2 release
• 5d492ee test: Fixed the tests for older Chrome and Safari
• 8075b37 fix: Adjusted the list of permitted SVG HTML integration points
• 61b761f fix: Switched to using the getParentNode API for some calls
• ee17313 docs: Added new mentions of honor to the readme
• 7bbd12b chore: Preparing 3.1.1 release
• 87eff29 Merge branch 'main' of github.com:cure53/DOMPurify

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)