Skip to content

Commit 4f2d96a

Browse files
chore(deps-dev): Bump dompurify from 3.3.1 to 3.3.2 (#12440)
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.1 to 3.3.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cure53/DOMPurify/releases">dompurify's releases</a>.</em></p> <blockquote> <h2>DOMPurify 3.3.2</h2> <ul> <li>Fixed a possible bypass caused by jsdom's faulty raw-text tag parsing, thanks multiple reporters</li> <li>Fixed a prototype pollution issue when working with custom elements, thanks <a href="https://github.com/christos-eth"><code>@​christos-eth</code></a></li> <li>Fixed a lenient config parsing in <code>_isValidAttribute</code>, thanks <a href="https://github.com/christos-eth"><code>@​christos-eth</code></a></li> <li>Bumped and removed several dependencies, thanks <a href="https://github.com/Rotzbua"><code>@​Rotzbua</code></a></li> <li>Fixed the test suite after bumping dependencies, thanks <a href="https://github.com/Rotzbua"><code>@​Rotzbua</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cure53/DOMPurify/commit/5e56114cb24079ce52dbc51f76e494b77afa5153"><code>5e56114</code></a> Getting 3.x branch ready for 3.3.2 release (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1208">#1208</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/e8c95f4a27aa8b041f92b59ab7685a94f7be6208"><code>e8c95f4</code></a> fix: Fixed the broken package-lock.json</li> <li><a href="https://github.com/cure53/DOMPurify/commit/9636037c145b769dad0b52da8313301cbf867f46"><code>9636037</code></a> Update package-lock.json</li> <li><a href="https://github.com/cure53/DOMPurify/commit/5cad4cecf2e647ac66eed25bc02a2415f00dbc8b"><code>5cad4ce</code></a> Getting 3.x branch ready for 3.3.2 releas (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1205">#1205</a>)</li> <li>See full diff in <a href="https://github.com/cure53/DOMPurify/compare/3.3.1...3.3.2">compare view</a></li> </ul> </details> <br />
1 parent aab0f03 commit 4f2d96a

3 files changed

Lines changed: 18 additions & 6 deletions

File tree

218 KB
Binary file not shown.

packages/web-components/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -185,7 +185,7 @@
185185
"cypress-wait-until": "^1.7.2",
186186
"del": "^6.0.0",
187187
"doctoc": "^2.0.0",
188-
"dompurify": "3.3.1",
188+
"dompurify": "3.3.2",
189189
"enzyme": "^3.11.0",
190190
"file-loader": "^6.2.0",
191191
"fs-extra": "^10.0.0",

yarn.lock

Lines changed: 17 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3605,7 +3605,7 @@ __metadata:
36053605
cypress-wait-until: "npm:^1.7.2"
36063606
del: "npm:^6.0.0"
36073607
doctoc: "npm:^2.0.0"
3608-
dompurify: "npm:3.3.1"
3608+
dompurify: "npm:3.3.2"
36093609
enzyme: "npm:^3.11.0"
36103610
file-loader: "npm:^6.2.0"
36113611
fs-extra: "npm:^10.0.0"
@@ -15023,15 +15023,15 @@ __metadata:
1502315023
languageName: node
1502415024
linkType: hard
1502515025

15026-
"dompurify@npm:3.3.1, dompurify@npm:^3.3.1":
15027-
version: 3.3.1
15028-
resolution: "dompurify@npm:3.3.1"
15026+
"dompurify@npm:3.3.2":
15027+
version: 3.3.2
15028+
resolution: "dompurify@npm:3.3.2"
1502915029
dependencies:
1503015030
"@types/trusted-types": "npm:^2.0.7"
1503115031
dependenciesMeta:
1503215032
"@types/trusted-types":
1503315033
optional: true
15034-
checksum: 10/f71cca489e628591165d16e8cf4fa4f0d3e2ee48db4d73e9d2c5bedc6f915c92f9e9f101f8c4ba790bec0cdffe7f4e1747f5e31c69dc53ce7ae20a81ff6b0022
15034+
checksum: 10/3ca02559677ce6d9583a500f21ffbb6b9e88f1af99f69fa0d0d9442cddbac98810588c869f8b435addb5115492d6e49870024bca322169b941bafedb99c7f281
1503515035
languageName: node
1503615036
linkType: hard
1503715037

@@ -15042,6 +15042,18 @@ __metadata:
1504215042
languageName: node
1504315043
linkType: hard
1504415044

15045+
"dompurify@npm:^3.3.1":
15046+
version: 3.3.1
15047+
resolution: "dompurify@npm:3.3.1"
15048+
dependencies:
15049+
"@types/trusted-types": "npm:^2.0.7"
15050+
dependenciesMeta:
15051+
"@types/trusted-types":
15052+
optional: true
15053+
checksum: 10/f71cca489e628591165d16e8cf4fa4f0d3e2ee48db4d73e9d2c5bedc6f915c92f9e9f101f8c4ba790bec0cdffe7f4e1747f5e31c69dc53ce7ae20a81ff6b0022
15054+
languageName: node
15055+
linkType: hard
15056+
1504515057
"domutils@npm:^1.7.0":
1504615058
version: 1.7.0
1504715059
resolution: "domutils@npm:1.7.0"

0 commit comments

Comments
 (0)