chore(deps): dompurify@^2.2.3 (#6679)
This contribution allows the installation of DOMPurify ^2.2.3 instead of locking to the specific 2.2.2. The version 2.2.2 has a known security issue [0].
This commit is contained in:
6
package-lock.json
generated
6
package-lock.json
generated
@@ -11142,9 +11142,9 @@
|
||||
}
|
||||
},
|
||||
"dompurify": {
|
||||
"version": "2.2.2",
|
||||
"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.2.2.tgz",
|
||||
"integrity": "sha512-BsGR4nDLaC5CNBnyT5I+d5pOeaoWvgVeg6Gq/aqmKYWMPR07131u60I80BvExLAJ0FQEIBQ1BTicw+C5+jOyrg=="
|
||||
"version": "2.2.3",
|
||||
"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.2.3.tgz",
|
||||
"integrity": "sha512-8Hv7Q0FuwD9rWoB6qI2eZsfKbGXfoUVuGHHrE15vgk4ReOKwOkSgbqb2OMFtc0d5besOEkoLkcyuV10zQ2X5gw=="
|
||||
},
|
||||
"domutils": {
|
||||
"version": "1.5.1",
|
||||
|
||||
@@ -66,7 +66,7 @@
|
||||
"classnames": "^2.2.6",
|
||||
"css.escape": "1.5.1",
|
||||
"deep-extend": "0.6.0",
|
||||
"dompurify": "=2.2.2",
|
||||
"dompurify": "^2.2.3",
|
||||
"ieee754": "^1.1.13",
|
||||
"immutable": "^3.x.x",
|
||||
"js-file-download": "^0.4.1",
|
||||
|
||||
Reference in New Issue
Block a user