[TikiWiki-commits] [Git][tikiwiki/tiki][master] [UPD] Update dompurify from v2.5 to v3.2 to prevent XSS

Benoit Grégoire pushed to branch master at Tiki Wiki CMS Groupware / Tiki


Commits:
f47c2f4e by ushindi bienvenu at 2025-09-29T17:27:48+00:00
[UPD] Update dompurify from v2.5 to v3.2 to prevent XSS
---
* [UPD] Update dompurify from v2.5 to v3.2 to prevent XSS

See merge request tikiwiki/tiki!8674

- - - - -


2 changed files:

- package-lock.json
- src/js/common-externals/package.json


Changes:

=====================================
package-lock.json
=====================================
@@ -6711,9 +6711,9 @@
       }
     },
     "node_modules/converse.js/node_modules/dompurify": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.6.tgz",
-      "integrity": "sha512-/2GogDQlohXPZe6D6NOgQvXLPSYBqIWMnZ8zzOhn09REE4eyAzb+Hed3jhoM9OkuaJ8P6ZGTTVWQKAi8ieIzfQ==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.7.tgz",
+      "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
       "dev": true,
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
@@ -11728,9 +11728,9 @@
       }
     },
     "node_modules/mermaid/node_modules/dompurify": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.6.tgz",
-      "integrity": "sha512-/2GogDQlohXPZe6D6NOgQvXLPSYBqIWMnZ8zzOhn09REE4eyAzb+Hed3jhoM9OkuaJ8P6ZGTTVWQKAi8ieIzfQ==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.7.tgz",
+      "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
@@ -14990,9 +14990,9 @@
       }
     },
     "node_modules/svgedit/node_modules/dompurify": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.6.tgz",
-      "integrity": "sha512-/2GogDQlohXPZe6D6NOgQvXLPSYBqIWMnZ8zzOhn09REE4eyAzb+Hed3jhoM9OkuaJ8P6ZGTTVWQKAi8ieIzfQ==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.7.tgz",
+      "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optional": true,
       "optionalDependencies": {
@@ -17048,6 +17048,16 @@
         "vue3-sfc-loader": "^0.9.5"
       }
     },
+    "src/js/common-externals/node_modules/dompurify": {
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.7.tgz",
+      "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
+      "dev": true,
+      "license": "(MPL-2.0 OR Apache-2.0)",
+      "optionalDependencies": {
+        "@types/trusted-types": "^2.0.7"
+      }
+    },
     "src/js/common-reexported": {
       "version": "1.0.0",
       "license": "ISC",


=====================================
src/js/common-externals/package.json
=====================================
@@ -21,7 +21,7 @@
     "codemirror": "^5.65.17",
     "converse.js": "^12.0.0",
     "d3-milestones": "^1.5.0",
-    "dompurify": "^2.3.3",
+    "dompurify": "^3.2.7",
     "driver.js": "^1.3.1",
     "fieldslinker": "^1.0.4",
     "fitvids": "^2.1.1",



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/f47c2f4eba05cd4450c5156b7ffb02f6111e64ed

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/f47c2f4eba05cd4450c5156b7ffb02f6111e64ed
You're receiving this email because of your account on gitlab.com.

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs