From 6b02e9d7a4573fd592b09aa2b84051e788f97669 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 4 Sep 2020 03:36:15 +0000 Subject: [PATCH] Bump dompurify from 1.0.11 to 2.0.7 Bumps [dompurify](https://github.com/cure53/DOMPurify) from 1.0.11 to 2.0.7. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/1.0.11...2.0.7) Signed-off-by: dependabot[bot] --- package-lock.json | 6 +++--- package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index d7824b3..bf6ea4c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2064,9 +2064,9 @@ } }, "dompurify": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-1.0.11.tgz", - "integrity": "sha512-XywCTXZtc/qCX3iprD1pIklRVk/uhl8BKpkTxr+ZyMVUzSUg7wkQXRBp/euJ5J5moa1QvfpvaPQVP71z1O59dQ==" + "version": "2.0.7", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.0.7.tgz", + "integrity": "sha512-S3O0lk6rFJtO01ZTzMollCOGg+WAtCwS3U5E2WSDY/x/sy7q70RjEC4Dmrih5/UqzLLB9XoKJ8KqwBxaNvBu4A==" }, "domutils": { "version": "1.7.0", diff --git a/package.json b/package.json index 82a20db..019345e 100644 --- a/package.json +++ b/package.json @@ -20,7 +20,7 @@ "connect-mongo": "^3.0.0", "cors": "^2.8.5", "csurf": "^1.10.0", - "dompurify": "^1.0.10", + "dompurify": "^2.0.7", "dotenv": "^8.0.0", "ejs": "^2.6.1", "express": "^4.16.4",