chore: bump dompurify to fix xss vuln (#5651)

* chore: bump dumpurify to fix xss vuln

* lint fix
This commit is contained in:
Kristaps Fabians Geikins
2025-10-06 12:37:54 +02:00
committed by GitHub
parent 40512d45d1
commit 0624d5ed53
3 changed files with 19 additions and 7 deletions
@@ -4,7 +4,7 @@ import DOMPurify from 'dompurify'
import type { ShallowRef } from 'vue'
const purify = async (source: string) => {
let purify: DOMPurify.DOMPurifyI
let purify: typeof DOMPurify
if (import.meta.server) {
const jsdom = await import('jsdom')
+1 -1
View File
@@ -61,7 +61,7 @@
"@vueuse/core": "^10.9.0",
"apollo-upload-client": "^18.0.1",
"dayjs": "^1.11.7",
"dompurify": "^3.0.4",
"dompurify": "^3.2.7",
"graphql": "^16.6.0",
"ioredis": "^5.7.0",
"js-cookie": "^3.0.1",
+17 -5
View File
@@ -11167,7 +11167,7 @@ __metadata:
browserify-zlib: "npm:^0.2.0"
concurrently: "npm:^9.1.2"
dayjs: "npm:^1.11.7"
dompurify: "npm:^3.0.4"
dompurify: "npm:^3.2.7"
eslint: "npm:^9.4.0"
eslint-config-prettier: "npm:^9.1.0"
eslint-plugin-vuejs-accessibility: "npm:^2.3.0"
@@ -14472,6 +14472,13 @@ __metadata:
languageName: node
linkType: hard
"@types/trusted-types@npm:^2.0.7":
version: 2.0.7
resolution: "@types/trusted-types@npm:2.0.7"
checksum: 10/8e4202766a65877efcf5d5a41b7dd458480b36195e580a3b1085ad21e948bc417d55d6f8af1fd2a7ad008015d4117d5fdfe432731157da3c68678487174e4ba3
languageName: node
linkType: hard
"@types/tryghost__content-api@npm:^1":
version: 1.3.16
resolution: "@types/tryghost__content-api@npm:1.3.16"
@@ -20427,10 +20434,15 @@ __metadata:
languageName: node
linkType: hard
"dompurify@npm:^3.0.4":
version: 3.0.11
resolution: "dompurify@npm:3.0.11"
checksum: 10/fc7027ef5cc09ad906625e8aa39b3ca50570fd05aec9fd5995349f0be866385122265c7a823c416694c7bb4c3415e9172cce03b92a153a16c7d1d27165b2a0fd
"dompurify@npm:^3.2.7":
version: 3.2.7
resolution: "dompurify@npm:3.2.7"
dependencies:
"@types/trusted-types": "npm:^2.0.7"
dependenciesMeta:
"@types/trusted-types":
optional: true
checksum: 10/51b7866fb834ee62d6c415f41ece5ce11db7b463f60a822932a1f832573a40b98be7715550298690e7647988fbe086db1098bda9b10548b3166fc975eb9bd849
languageName: node
linkType: hard