[Snyk] Upgrade dompurify from 3.0.5 to 3.2.1 #26
Conversation
Snyk has created this PR to upgrade dompurify from 3.0.5 to 3.2.1. See this package in npm: dompurify See this project in Snyk: https://app.snyk.io/org/sammytezzy/project/54d742ef-f52e-4145-a5b1-9d7e5208377f?utm_source=github&utm_medium=referral&page=upgrade-pr
|
|
|
Reviewer's Guide by SourceryThis PR upgrades the dompurify package from version 3.0.5 to 3.2.1 to address several security vulnerabilities, including a high-severity Prototype Pollution issue and two medium-severity issues (Template Injection and Cross-site Scripting). The upgrade spans 16 versions and includes various bug fixes and improvements to type definitions. No diagrams generated as the changes look simple and do not need a visual representation. File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
Snyk has created this PR to upgrade dompurify from 3.0.5 to 3.2.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 16 versions ahead of your current version.
The recommended version was released on 22 days ago.
Issues fixed by the recommended upgrade:
SNYK-JS-DOMPURIFY-7984421
SNYK-JS-DOMPURIFY-6474511
SNYK-JS-DOMPURIFY-8184974
Release notes
Package name: dompurify
-
3.2.1 - 2024-11-20
- Fixed several minor issues with the type definitions, thanks @ reduckted @ ghiscoding @ asamuzaK @ MiniDigger
- Fixed an issue with non-minified dist files and order of imports, thanks @ reduckted
-
3.2.0 - 2024-11-11
- Added type declarations, thanks @ reduckted , @ philmayfield, @ aloisklink, @ ssi02014 and others
- Fixed a minor issue with the handling of hooks, thanks @ kevin-mizu
-
3.1.7 - 2024-09-26
- Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @ masatokinugawa
- Fixed several smaller typos in documentation and test & build files, thanks @ christianhg
- Added better support for Angular compiler, thanks @ jeroen1602
- Added several new attributes to HTML and SVG allow-list, thanks @ Gigabyte5671 and @ Rotzbua
- Removed the
- Bumped several dependencies to be more up to date
-
3.1.6 - 2024-07-05
- Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @ kevin-mizu
- Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks @ realansgar
- Fixed a minor problem with the bower file pointing to the wrong dist path
- Fixed several minor typos in docs, comments and comment blocks, thanks @ Rotzbua
- Updated several development dependencies
-
3.1.5 - 2024-05-31
- Fixed a minor issue with the dist paths in
- Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @ kakao-bishop-cho
-
3.1.4 - 2024-05-20
-
3.1.3 - 2024-05-11
-
3.1.2 - 2024-04-30
-
3.1.1 - 2024-04-26
-
3.1.0 - 2024-04-07
-
3.0.11 - 2024-03-21
-
3.0.10 - 2024-03-19
-
3.0.9 - 2024-02-20
-
3.0.8 - 2024-01-05
-
3.0.7 - 2024-01-04
-
3.0.6 - 2023-09-28
-
3.0.5 - 2023-07-11
from dompurify GitHub release notesforeignObjectelement from the list of HTML entry-points, thanks @ masatokinugawabower.js, thanks @ HakumenNCImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
Summary by Sourcery
Bug Fixes: