From 792fd067013b175606902c41150554fc85db5f32 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Fri, 18 Dec 2020 22:54:11 +0000 Subject: [PATCH] [Security] Bump dompurify from 1.0.1 to 2.0.17 Bumps [dompurify](https://github.com/cure53/DOMPurify) from 1.0.1 to 2.0.17. **This update includes security fixes.** - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/1.0.1...2.0.17) Signed-off-by: dependabot-preview[bot] --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 70b41570..e29ebc1c 100644 --- a/package.json +++ b/package.json @@ -30,7 +30,7 @@ "coveralls": "^2.11.12", "cross-env": "1.0.7", "css-loader": "2.1.1", - "dompurify": "1.0.1", + "dompurify": "2.0.17", "dotenv": "4.0.0", "eslint-plugin-import": "^1.6.1", "eslint-watch": "^2.1.11", diff --git a/yarn.lock b/yarn.lock index 0a62fb9c..a7b07632 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2958,10 +2958,10 @@ domify@~1.4.0: resolved "https://registry.yarnpkg.com/domify/-/domify-1.4.0.tgz#11483617f764f8695975b4bdc79b14f0803b629b" integrity sha1-EUg2F/dk+GlZdbS9x5sU8IA7Yps= -dompurify@1.0.1: - version "1.0.1" - resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-1.0.1.tgz#a7dae8a6b0719c80d7d639fe44f834b81e9b02b8" - integrity sha512-f4076WvReScVPWXLkAA/xDZHqBLa7yXgKqGQijAch4f7FtXW8GMm9lRRbb7zVSTbHbggzo0ba9sv8FPybtejpg== +dompurify@2.0.17: + version "2.0.17" + resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.0.17.tgz#505ffa126a580603df4007e034bdc9b6b738668e" + integrity sha512-nNwwJfW55r8akD8MSFz6k75bzyT2y6JEa1O3JrZFBf+Y5R9JXXU4OsRl0B9hKoPgHTw2b7ER5yJ5Md97MMUJPg== domutils@1.5.1: version "1.5.1"