Bump dompurify from 3.0.11 to 3.1.5 in /api by dependabot[bot] · Pull Request #224 · vbackeberg/lookattime

dependabot · 2024-06-03T14:12:41Z

Bumps dompurify from 3.0.11 to 3.1.5.

Release notes

DOMPurify 3.1.5

Fixed a minor issue with the dist paths in bower.js, thanks @HakumenNC

Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @kakao-bishop-cho

DOMPurify 3.1.4

Fixed an issue with the recently implemented isNaN checks, thanks @tulach

Added several new popover attributes to allow-list, thanks @Gigabyte5671

Fixed the tests and adjusted the test runner to cover all branches

DOMPurify 3.1.3

Fixed several mXSS variations found by and thanks to @kevin-mizu & @Ry0taK

Added better configurability for comment scrubbing default behavior

Added better hardening against Prototype Pollution attacks, thanks @kevin-mizu

Added better handling and readability of the nodeType property, thanks @ssi02014

Fixed some smaller issues in README and other documentation

DOMPurify 3.1.2

Addressed and fixed a mXSS variation found by @kevin-mizu

Addressed and fixed a mXSS variation found by Adam Kues of Assetnote

Updated tests for older Safari and Chrome versions

DOMPurify 3.1.1

Fixed an mXSS sanitiser bypass reported by @icesfont

Added new code to track element nesting depth

Added new code to enforce a maximum nesting depth of 255

Added coverage tests and necessary clobbering protections

Note that this is a security release and should be upgraded to immediately. Please also note that further releases may follow as the underlying vulnerability is apparently new and further variations may be discovered.

DOMPurify 3.1.0

Added new setting SAFE_FOR_XML to enable better control over comment scrubbing

Updated README to warn about happy-dom not being safe for use with DOMPurify yet

Updated the LICENSE file to show the accurate year number

Updated several build and test dependencies

Commits

6676133 Merge pull request #964 from cure53/main
16a46de chore: Preparing 3.1.5 release
7cf4890 chore: Experimentally removing the depth counter logic as we have better defe...
bfeb9a9 see #961
7517e9c Merge pull request #960 from cure53/main
3ddb7f2 chore: Preparing 3.1.4 release
4486f91 test: Experimentally changed TEST_PROBE_ONLY to not cover 2.x
1223487 fix: Added MSIE number check fix to main as well
a34860b Merge pull request #957 from Gigabyte5671/popover-api
96bf0d4 Merge pull request #956 from MortenHofft/patch-1
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [axios](https://github.com/axios/axios) from 0.21.2 to 1.4.0. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v0.21.2...v1.4.0) --- updated-dependencies: - dependency-name: axios dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [dompurify](https://github.com/cure53/DOMPurify) and [@types/dompurify](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dompurify). These dependencies needed to be updated together. Updates `dompurify` from 3.0.1 to 3.0.3 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.0.1...3.0.3) Updates `@types/dompurify` from 3.0.1 to 3.0.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dompurify) --- updated-dependencies: - dependency-name: dompurify dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: "@types/dompurify" dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [sass](https://github.com/sass/dart-sass) from 1.60.0 to 1.63.6. - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.60.0...1.63.6) --- updated-dependencies: - dependency-name: sass dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue) from 9.10.0 to 9.15.1. - [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases) - [Commits](vuejs/eslint-plugin-vue@v9.10.0...v9.15.1) --- updated-dependencies: - dependency-name: eslint-plugin-vue dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [typescript](https://github.com/Microsoft/TypeScript) from 5.0.4 to 5.1.6. - [Release notes](https://github.com/Microsoft/TypeScript/releases) - [Commits](https://github.com/Microsoft/TypeScript/commits) --- updated-dependencies: - dependency-name: typescript dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [eslint](https://github.com/eslint/eslint) from 8.38.0 to 8.44.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](eslint/eslint@v8.38.0...v8.44.0) --- updated-dependencies: - dependency-name: eslint dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) from 4.1.2 to 4.1.3. - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.1.2...v4.1.3) --- updated-dependencies: - dependency-name: tough-cookie dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [vuetify](https://github.com/vuetifyjs/vuetify/tree/HEAD/packages/vuetify) from 2.6.14 to 2.7.0. - [Release notes](https://github.com/vuetifyjs/vuetify/releases) - [Commits](https://github.com/vuetifyjs/vuetify/commits/v2.7.0/packages/vuetify) --- updated-dependencies: - dependency-name: vuetify dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.57.0 to 5.61.0. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.61.0/packages/eslint-plugin) --- updated-dependencies: - dependency-name: "@typescript-eslint/eslint-plugin" dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [semver](https://github.com/npm/node-semver) from 7.3.8 to 7.5.4. - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.3.8...v7.5.4) --- updated-dependencies: - dependency-name: semver dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…emver-7.5.4 Bump semver from 7.3.8 to 7.5.4 in /api

…ypescript-eslint/eslint-plugin-5.61.0 Bump @typescript-eslint/eslint-plugin from 5.57.0 to 5.61.0 in /web

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 4.1.3 to 4.3.3. - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.1.3...v4.3.3) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.20.1 to 7.23.7. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.23.7/packages/babel-traverse) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…uetify-2.7.0 Bump vuetify from 2.6.14 to 2.7.0 in /web

…ough-cookie-4.1.3 Bump tough-cookie from 4.1.2 to 4.1.3 in /api

…ough-cookie-4.1.3 Bump tough-cookie from 4.1.2 to 4.1.3 in /web

…slint-8.44.0 Bump eslint from 8.38.0 to 8.44.0 in /api

…slint-plugin-vue-9.15.1 Bump eslint-plugin-vue from 9.10.0 to 9.15.1 in /web

…ypescript-5.1.6 Bump typescript from 5.0.4 to 5.1.6 in /api

…ass-1.63.6 Bump sass from 1.60.0 to 1.63.6 in /web

…ompurify-and-types/dompurify-3.0.3 Bump dompurify and @types/dompurify in /api

Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.5. - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) --- updated-dependencies: - dependency-name: word-wrap dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…ord-wrap-1.2.5 Bump word-wrap from 1.2.3 to 1.2.5 in /api

…ast-xml-parser-4.3.3 Bump fast-xml-parser from 4.1.3 to 4.3.3 in /api

…ios-1.4.0 Bump axios from 0.21.2 to 1.4.0 in /web

…abel/traverse-7.23.7 Bump @babel/traverse from 7.20.1 to 7.23.7 in /web

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.8 to 1.15.5. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.8...v1.15.5) --- updated-dependencies: - dependency-name: follow-redirects dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [axios](https://github.com/axios/axios) from 0.21.2 to 1.6.0. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v0.21.2...v1.6.0) --- updated-dependencies: - dependency-name: axios dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [mime](https://github.com/broofa/mime) from 4.0.1 to 4.0.3. - [Changelog](https://github.com/broofa/mime/blob/v4.0.3/CHANGELOG.md) - [Commits](broofa/mime@v4.0.1...v4.0.3) --- updated-dependencies: - dependency-name: mime dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue) from 9.15.1 to 9.26.0. - [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases) - [Commits](vuejs/eslint-plugin-vue@v9.15.1...v9.26.0) --- updated-dependencies: - dependency-name: eslint-plugin-vue dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [@vue/test-utils](https://github.com/vuejs/test-utils) from 1.3.6 to 2.4.6. - [Release notes](https://github.com/vuejs/test-utils/releases) - [Commits](https://github.com/vuejs/test-utils/commits/v2.4.6) --- updated-dependencies: - dependency-name: "@vue/test-utils" dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [@azure/functions](https://github.com/Azure/azure-functions-nodejs-library) from 4.3.0 to 4.5.0. - [Release notes](https://github.com/Azure/azure-functions-nodejs-library/releases) - [Commits](Azure/azure-functions-nodejs-library@v4.3.0...v4.5.0) --- updated-dependencies: - dependency-name: "@azure/functions" dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [eslint](https://github.com/eslint/eslint) from 8.57.0 to 9.4.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](eslint/eslint@v8.57.0...v9.4.0) --- updated-dependencies: - dependency-name: eslint dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.0.11 to 3.1.5. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.0.11...3.1.5) --- updated-dependencies: - dependency-name: dompurify dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) --- updated-dependencies: - dependency-name: braces dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js) from 2.6.3 to 2.9.2. - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases) - [Commits](AzureAD/microsoft-authentication-library-for-js@msal-node-v2.6.3...msal-node-v2.9.2) --- updated-dependencies: - dependency-name: "@azure/msal-node" dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…races-3.0.3 Bump braces from 3.0.2 to 3.0.3 in /web

…zure/msal-node-2.9.2 Bump @azure/msal-node from 2.6.3 to 2.9.2 in /api

…ompurify-3.1.5 Bump dompurify from 3.0.11 to 3.1.5 in /web

…zure/functions-4.5.0 Bump @azure/functions from 4.3.0 to 4.5.0 in /api

…re/static-web-apps-deploy-1 Bump Azure/static-web-apps-deploy from 0.0.1.pre.preview to 1

…slint-9.4.0 Bump eslint from 8.57.0 to 9.4.0 in /api

Bumps [axios](https://github.com/axios/axios) from 1.6.7 to 1.7.2. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.6.7...v1.7.2) --- updated-dependencies: - dependency-name: axios dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

…xios-1.7.2 Bump axios from 1.6.7 to 1.7.2 in /web

…ue/test-utils-2.4.6 Bump @vue/test-utils from 1.3.6 to 2.4.6 in /web

…slint-plugin-vue-9.26.0 Bump eslint-plugin-vue from 9.15.1 to 9.26.0 in /web

…ime-4.0.3 Bump mime from 4.0.1 to 4.0.3 in /api

…ypescript-5.4.5 Bump typescript from 5.4.3 to 5.4.5 in /api

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.0.11 to 3.1.5. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.0.11...3.1.5) --- updated-dependencies: - dependency-name: dompurify dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot and others added 30 commits May 1, 2023 15:07

Merge pull request #134 from vbackeberg/dependabot/npm_and_yarn/api/s…

b6cac5a

…emver-7.5.4 Bump semver from 7.3.8 to 7.5.4 in /api

Merge pull request #133 from vbackeberg/dependabot/npm_and_yarn/web/t…

643ea76

…ypescript-eslint/eslint-plugin-5.61.0 Bump @typescript-eslint/eslint-plugin from 5.57.0 to 5.61.0 in /web

Merge pull request #132 from vbackeberg/dependabot/npm_and_yarn/web/v…

3c618dc

…uetify-2.7.0 Bump vuetify from 2.6.14 to 2.7.0 in /web

Merge pull request #131 from vbackeberg/dependabot/npm_and_yarn/api/t…

7888887

…ough-cookie-4.1.3 Bump tough-cookie from 4.1.2 to 4.1.3 in /api

Merge pull request #130 from vbackeberg/dependabot/npm_and_yarn/web/t…

393b029

…ough-cookie-4.1.3 Bump tough-cookie from 4.1.2 to 4.1.3 in /web

Merge pull request #128 from vbackeberg/dependabot/npm_and_yarn/api/e…

d83f5e7

…slint-8.44.0 Bump eslint from 8.38.0 to 8.44.0 in /api

Merge pull request #125 from vbackeberg/dependabot/npm_and_yarn/web/e…

a22d7c5

…slint-plugin-vue-9.15.1 Bump eslint-plugin-vue from 9.10.0 to 9.15.1 in /web

Merge pull request #127 from vbackeberg/dependabot/npm_and_yarn/api/t…

ab9bbe7

…ypescript-5.1.6 Bump typescript from 5.0.4 to 5.1.6 in /api

Merge pull request #124 from vbackeberg/dependabot/npm_and_yarn/web/s…

18a6a8d

…ass-1.63.6 Bump sass from 1.60.0 to 1.63.6 in /web

Merge pull request #101 from vbackeberg/dependabot/npm_and_yarn/api/d…

0f9a285

…ompurify-and-types/dompurify-3.0.3 Bump dompurify and @types/dompurify in /api

Merge pull request #135 from vbackeberg/dependabot/npm_and_yarn/api/w…

85cfa8d

…ord-wrap-1.2.5 Bump word-wrap from 1.2.3 to 1.2.5 in /api

Merge pull request #136 from vbackeberg/dependabot/npm_and_yarn/api/f…

de1c2c7

…ast-xml-parser-4.3.3 Bump fast-xml-parser from 4.1.3 to 4.3.3 in /api

Merge pull request #99 from vbackeberg/dependabot/npm_and_yarn/web/ax…

b09e9de

…ios-1.4.0 Bump axios from 0.21.2 to 1.4.0 in /web

Merge pull request #137 from vbackeberg/dependabot/npm_and_yarn/web/b…

12ebce1

…abel/traverse-7.23.7 Bump @babel/traverse from 7.20.1 to 7.23.7 in /web

dependabot Bot added 4 commits April 29, 2024 14:16

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 3, 2024

dependabot Bot mentioned this pull request Jun 3, 2024

Bump dompurify from 3.0.11 to 3.1.4 in /api #222

Closed

dependabot Bot and others added 9 commits June 3, 2024 14:13

Merge pull request #227 from vbackeberg/dependabot/npm_and_yarn/web/b…

b27cf44

…races-3.0.3 Bump braces from 3.0.2 to 3.0.3 in /web

Merge pull request #228 from vbackeberg/dependabot/npm_and_yarn/api/a…

73cf8d6

…zure/msal-node-2.9.2 Bump @azure/msal-node from 2.6.3 to 2.9.2 in /api

Merge pull request #226 from vbackeberg/dependabot/npm_and_yarn/web/d…

de5a262

…ompurify-3.1.5 Bump dompurify from 3.0.11 to 3.1.5 in /web

Merge pull request #221 from vbackeberg/dependabot/npm_and_yarn/api/a…

8c894ad

…zure/functions-4.5.0 Bump @azure/functions from 4.3.0 to 4.5.0 in /api

Merge pull request #205 from vbackeberg/dependabot/github_actions/Azu…

f6fafdb

…re/static-web-apps-deploy-1 Bump Azure/static-web-apps-deploy from 0.0.1.pre.preview to 1

dependabot Bot force-pushed the dependabot/npm_and_yarn/api/dompurify-3.1.5 branch from 9549dbc to dadeeab Compare June 12, 2024 05:53

vbackeberg and others added 2 commits June 12, 2024 07:53

Merge pull request #225 from vbackeberg/dependabot/npm_and_yarn/api/e…

b10a4eb

…slint-9.4.0 Bump eslint from 8.57.0 to 9.4.0 in /api

dependabot Bot force-pushed the dependabot/npm_and_yarn/api/dompurify-3.1.5 branch from dadeeab to bbba48d Compare June 12, 2024 05:53

vbackeberg added 2 commits June 12, 2024 07:53

Merge pull request #223 from vbackeberg/dependabot/npm_and_yarn/web/a…

e148045

…xios-1.7.2 Bump axios from 1.6.7 to 1.7.2 in /web

Merge pull request #216 from vbackeberg/dependabot/npm_and_yarn/web/v…

1b8d300

…ue/test-utils-2.4.6 Bump @vue/test-utils from 1.3.6 to 2.4.6 in /web

dependabot Bot force-pushed the dependabot/npm_and_yarn/api/dompurify-3.1.5 branch from bbba48d to d6fa07c Compare June 12, 2024 05:54

vbackeberg added 3 commits June 12, 2024 07:54

Merge pull request #214 from vbackeberg/dependabot/npm_and_yarn/web/e…

37cf5f0

…slint-plugin-vue-9.26.0 Bump eslint-plugin-vue from 9.15.1 to 9.26.0 in /web

Merge pull request #209 from vbackeberg/dependabot/npm_and_yarn/api/m…

bd6ba25

…ime-4.0.3 Bump mime from 4.0.1 to 4.0.3 in /api

Merge pull request #203 from vbackeberg/dependabot/npm_and_yarn/api/t…

78f9a20

…ypescript-5.4.5 Bump typescript from 5.4.3 to 5.4.5 in /api

dependabot Bot force-pushed the dependabot/npm_and_yarn/api/dompurify-3.1.5 branch from d6fa07c to d93fd2d Compare June 12, 2024 05:54

dependabot Bot force-pushed the dependabot/npm_and_yarn/api/dompurify-3.1.5 branch from d93fd2d to 49a7862 Compare June 12, 2024 05:54

vbackeberg force-pushed the master branch from df98bd8 to 4150727 Compare December 14, 2024 11:26

Navigation Menu

Bump dompurify from 3.0.11 to 3.1.5 in /api - #224

Bump dompurify from 3.0.11 to 3.1.5 in /api#224
dependabot[bot] wants to merge 153 commits into
masterfrom
dependabot/npm_and_yarn/api/dompurify-3.1.5

dependabot Bot commented on behalf of github Jun 3, 2024 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 3, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

DOMPurify 3.1.5

DOMPurify 3.1.4

DOMPurify 3.1.3

DOMPurify 3.1.2

DOMPurify 3.1.1

DOMPurify 3.1.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jun 3, 2024 •

edited

Loading