Skip to content

Bump dompurify from 2.4.4 to 2.4.6

dependabot requested to merge dependabot-npm_and_yarn-dompurify-2.4.6 into main

Bumps dompurify from 2.4.4 to 2.4.6.

Release notes

Sourced from dompurify's releases.

DOMPurify 2.4.6

  • Fixed a bypass in jsdom 22 in case the noframes element is permitted, thanks @​leeN

DOMPurify 2.4.5

  • Fixed a problem with improper reset of custom HTML options, thanks @​ammaraskar
Commits
  • 5b7dff9 chore: Preparing 2.4.6 release
  • a01c083 Fix: addressed a bypass on jsdom 22 when noframes tag is allowed
  • f464d95 chore: preparing 2.4.5 release
  • See full diff in compare view

Dependabot commands
You can trigger Dependabot actions by commenting on this MR
  • $dependabot rebase will rebase this MR
  • $dependabot recreate will recreate this MR rewriting all the manual changes and resolving conflicts

Merge request reports