Closed dependabot[bot] closed 3 months ago
All modified and coverable lines are covered by tests :white_check_mark:
Project coverage is 99.27%. Comparing base (
b0022de
) to head (4a381e1
). Report is 8 commits behind head on main.:exclamation: Current head 4a381e1 differs from pull request most recent head 3f92a57. Consider uploading reports for the commit 3f92a57 to get more accurate results
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
⚠️ Dependabot is rebasing this PR ⚠️
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps dompurify from 3.0.9 to 3.0.11.
Release notes
Sourced from dompurify's releases.
Commits
a9fd4ae
Merge pull request #921 from cure53/main03d20b1
chore: Preparing 3.0.11 releasec60a4df
fix: Made the NodeFilter see CDATA sections as well, thanks@Ry0taK
dce81a5
fix: Addressed a conditional bypass pattern spotted by@Ry0taK
f2b637f
Merge pull request #917 from cure53/main51eea81
chore: Preparing 3.0.10 releasedbc1d26
Merge pull request #915 from cure53/dependabot/npm_and_yarn/follow-redirects-...aaa6da1
build(deps-dev): bump follow-redirects from 1.15.4 to 1.15.6fcb9dbd
fix: added a fix to handle invalid HTML Custom Element tagNames better1b59639
fix: Fixed a possible issue with XML processing instructions deployed in HTMLDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show