Skip to content

Commit 922955a

Browse files
committed
chore(deps): bump lettersanitizer from 1.0.6 to 1.0.8
This release includes a [patch][1] that fixes an [issue][2] affecting Chatwoot: in some cases, if you receive a malformed email with deeply-nested tags considered unvalid by `lettersanitizer`, just selecting the email in your inbox causes the browser tab or even the whole computer to freeze, due to RAM exhaustion. [1]: mat-sz/lettersanitizer#10 [2]: GHSA-hhw2-373g-hx77 Also, bump vue-letter from 0.2.1 to 0.2.2, which bumped its own lettersanitizer dependency to 1.0.8.
1 parent 2ac55c8 commit 922955a

2 files changed

Lines changed: 13 additions & 13 deletions

File tree

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -78,7 +78,7 @@
7878
"idb": "^8.0.0",
7979
"js-cookie": "^3.0.5",
8080
"json-logic-js": "^2.0.5",
81-
"lettersanitizer": "^1.0.6",
81+
"lettersanitizer": "^1.0.8",
8282
"libphonenumber-js": "^1.11.9",
8383
"markdown-it": "^14.1.1",
8484
"markdown-it-link-attributes": "^4.0.1",
@@ -104,7 +104,7 @@
104104
"vue-datepicker-next": "^1.0.3",
105105
"vue-dompurify-html": "^5.3.0",
106106
"vue-i18n": "9.14.5",
107-
"vue-letter": "^0.2.1",
107+
"vue-letter": "^0.2.2",
108108
"vue-router": "~4.4.5",
109109
"vue-upload-component": "^3.1.17",
110110
"vue3-click-away": "^1.2.4",

pnpm-lock.yaml

Lines changed: 11 additions & 11 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)