[TikiWiki-commits] [Git][tikiwiki/tiki][29.x] [UPD] Update dompurify from v2.5 to v3.2 to prevent XSS

ushindi bienvenu pushed to branch 29.x at Tiki Wiki CMS Groupware / Tiki


Commits:
4e73cbf2 by ushindi bienvenu at 2025-09-30T09:42:58+00:00
[UPD] Update dompurify from v2.5 to v3.2 to prevent XSS
---
* [UPD] Update dompurify from v2.5 to v3.2 to prevent XSS
---
* [UPD] Update dompurify from v2.5 to v3.2 to prevent XSS

See merge request tikiwiki/tiki!8674

See merge request tikiwiki/tiki!8685

- - - - -


2 changed files:

- package-lock.json
- src/js/common-externals/package.json


Changes:

=====================================
package-lock.json
=====================================
@@ -3019,6 +3019,12 @@
         "prosemirror-view": "^1.18.7"
       }
     },
+    "node_modules/@toast-ui/editor/node_modules/dompurify": {
+      "version": "2.5.8",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.5.8.tgz",
+      "integrity": "sha512-o1vSNgrmYMQObbSSvF/1brBYEQPHhV1+gsmrusO7/GXtp1T9rCS8cXFqVxK/9crT1jA6Ccv+5MTSjBNqr7Sovw==",
+      "license": "(MPL-2.0 OR Apache-2.0)"
+    },
     "node_modules/@turf/area": {
       "version": "7.2.0",
       "resolved": "https://registry.npmjs.org/@turf/area/-/area-7.2.0.tgz",
@@ -5644,6 +5650,13 @@
         "popper.js": "^1.16.1"
       }
     },
+    "node_modules/converse.js/node_modules/dompurify": {
+      "version": "2.5.8",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.5.8.tgz",
+      "integrity": "sha512-o1vSNgrmYMQObbSSvF/1brBYEQPHhV1+gsmrusO7/GXtp1T9rCS8cXFqVxK/9crT1jA6Ccv+5MTSjBNqr7Sovw==",
+      "dev": true,
+      "license": "(MPL-2.0 OR Apache-2.0)"
+    },
     "node_modules/convert-source-map": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz",
@@ -6536,9 +6549,13 @@
       "dev": true
     },
     "node_modules/dompurify": {
-      "version": "2.5.8",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.5.8.tgz",
-      "integrity": "sha512-o1vSNgrmYMQObbSSvF/1brBYEQPHhV1+gsmrusO7/GXtp1T9rCS8cXFqVxK/9crT1jA6Ccv+5MTSjBNqr7Sovw=="
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.7.tgz",
+      "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
+      "license": "(MPL-2.0 OR Apache-2.0)",
+      "optionalDependencies": {
+        "@types/trusted-types": "^2.0.7"
+      }
     },
     "node_modules/draw-svg-path": {
       "version": "1.0.0",
@@ -9475,6 +9492,14 @@
         "url": "https://opencollective.com/core-js"
       }
     },
+    "node_modules/jspdf/node_modules/dompurify": {
+      "version": "2.5.8",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.5.8.tgz",
+      "integrity": "sha512-o1vSNgrmYMQObbSSvF/1brBYEQPHhV1+gsmrusO7/GXtp1T9rCS8cXFqVxK/9crT1jA6Ccv+5MTSjBNqr7Sovw==",
+      "license": "(MPL-2.0 OR Apache-2.0)",
+      "optional": true,
+      "peer": true
+    },
     "node_modules/kanban": {
       "resolved": "src/js/vue-mf/kanban",
       "link": true
@@ -10137,14 +10162,6 @@
         "uuid": "^11.1.0"
       }
     },
-    "node_modules/mermaid/node_modules/dompurify": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.6.tgz",
-      "integrity": "sha512-/2GogDQlohXPZe6D6NOgQvXLPSYBqIWMnZ8zzOhn09REE4eyAzb+Hed3jhoM9OkuaJ8P6ZGTTVWQKAi8ieIzfQ==",
-      "optionalDependencies": {
-        "@types/trusted-types": "^2.0.7"
-      }
-    },
     "node_modules/mermaid/node_modules/uuid": {
       "version": "11.1.0",
       "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.0.tgz",
@@ -13173,15 +13190,6 @@
         "url": "https://opencollective.com/core-js"
       }
     },
-    "node_modules/svgedit/node_modules/dompurify": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.6.tgz",
-      "integrity": "sha512-/2GogDQlohXPZe6D6NOgQvXLPSYBqIWMnZ8zzOhn09REE4eyAzb+Hed3jhoM9OkuaJ8P6ZGTTVWQKAi8ieIzfQ==",
-      "optional": true,
-      "optionalDependencies": {
-        "@types/trusted-types": "^2.0.7"
-      }
-    },
     "node_modules/svgedit/node_modules/jspdf": {
       "version": "3.0.1",
       "resolved": "https://registry.npmjs.org/jspdf/-/jspdf-3.0.1.tgz",
@@ -15029,7 +15037,7 @@
         "codemirror": "^5.65.17",
         "converse.js": "^10.1.7",
         "d3-milestones": "^1.5.0",
-        "dompurify": "^2.3.3",
+        "dompurify": "^3.2.7",
         "driver.js": "^1.3.1",
         "fitvids": "^2.1.1",
         "html2canvas-pro": "^1.5.8",


=====================================
src/js/common-externals/package.json
=====================================
@@ -21,7 +21,7 @@
     "codemirror": "^5.65.17",
     "converse.js": "^10.1.7",
     "d3-milestones": "^1.5.0",
-    "dompurify": "^2.3.3",
+    "dompurify": "^3.2.7",
     "driver.js": "^1.3.1",
     "fitvids": "^2.1.1",
     "html2canvas-pro": "^1.5.8",



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/4e73cbf25f33c967b044ac7e6c820ea6cfa7e25e

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/4e73cbf25f33c967b044ac7e6c820ea6cfa7e25e
You're receiving this email because of your account on gitlab.com.

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs