From 0ab0e5360a1f357dddeafaa66d272a98213c50b5 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Fri, 4 Sep 2020 21:12:42 +0000 Subject: [PATCH] [Security] Bump dompurify from 1.0.1 to 2.0.7 Bumps [dompurify](https://github.com/cure53/DOMPurify) from 1.0.1 to 2.0.7. **This update includes security fixes.** - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/1.0.1...2.0.7) Signed-off-by: dependabot-preview[bot] --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 70b41570..7a619f0d 100644 --- a/package.json +++ b/package.json @@ -30,7 +30,7 @@ "coveralls": "^2.11.12", "cross-env": "1.0.7", "css-loader": "2.1.1", - "dompurify": "1.0.1", + "dompurify": "2.0.7", "dotenv": "4.0.0", "eslint-plugin-import": "^1.6.1", "eslint-watch": "^2.1.11", diff --git a/yarn.lock b/yarn.lock index 0a62fb9c..e224801f 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2958,10 +2958,10 @@ domify@~1.4.0: resolved "https://registry.yarnpkg.com/domify/-/domify-1.4.0.tgz#11483617f764f8695975b4bdc79b14f0803b629b" integrity sha1-EUg2F/dk+GlZdbS9x5sU8IA7Yps= -dompurify@1.0.1: - version "1.0.1" - resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-1.0.1.tgz#a7dae8a6b0719c80d7d639fe44f834b81e9b02b8" - integrity sha512-f4076WvReScVPWXLkAA/xDZHqBLa7yXgKqGQijAch4f7FtXW8GMm9lRRbb7zVSTbHbggzo0ba9sv8FPybtejpg== +dompurify@2.0.7: + version "2.0.7" + resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.0.7.tgz#f8266ad38fe1602fb5b3222f31eedbf5c16c4fd5" + integrity sha512-S3O0lk6rFJtO01ZTzMollCOGg+WAtCwS3U5E2WSDY/x/sy7q70RjEC4Dmrih5/UqzLLB9XoKJ8KqwBxaNvBu4A== domutils@1.5.1: version "1.5.1"