From 3b399066ac6a91a0331eb71150e1548f4fcac218 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Sep 2024 20:48:24 +0000 Subject: [PATCH] Bump dompurify from 2.2.7 to 2.5.4 in /src/main/frontend Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.2.7 to 2.5.4. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/2.2.7...2.5.4) --- updated-dependencies: - dependency-name: dompurify dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- src/main/frontend/package-lock.json | 6 +++--- src/main/frontend/package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/src/main/frontend/package-lock.json b/src/main/frontend/package-lock.json index 0665e61a..e5f04b91 100644 --- a/src/main/frontend/package-lock.json +++ b/src/main/frontend/package-lock.json @@ -2364,9 +2364,9 @@ "dev": true }, "dompurify": { - "version": "2.2.7", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.2.7.tgz", - "integrity": "sha512-jdtDffdGNY+C76jvodNTu9jt5yYj59vuTUyx+wXdzcSwAGTYZDAQkQ7Iwx9zcGrA4ixC1syU4H3RZROqRxokxg==" + "version": "2.5.4", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.5.4.tgz", + "integrity": "sha512-l5NNozANzaLPPe0XaAwvg3uZcHtDBnziX/HjsY1UcDj1MxTK8Dd0Kv096jyPK5HRzs/XM5IMj20dW8Fk+HnbUA==" }, "ee-first": { "version": "1.1.1", diff --git a/src/main/frontend/package.json b/src/main/frontend/package.json index c5366439..be0eef86 100644 --- a/src/main/frontend/package.json +++ b/src/main/frontend/package.json @@ -15,7 +15,7 @@ "@vanillawc/wc-monaco-editor": "^1.10.12", "body-parser": "^1.20.1", "compression": "^1.7.1", - "dompurify": "^2.2.7", + "dompurify": "^2.5.4", "marked": "^4.0.10", "polka": "^1.0.0-next.14", "sirv": "^1.0.11"