search

opensearch-project / reporting-cli

Apache License 2.0
4 stars 13 forks source link

Update dependency dompurify to v3 - autoclosed #83

Closed mend-for-github-com[bot] closed 1 day ago

mend-for-github-com[bot] commented 1 day ago

This PR contains the following updates:

Package Type Update Change
dompurify dependencies major ^2.1.1 -> ^3.0.0

By merging this PR, the issue #82 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 10.0 CVE-2024-47875
High High 7.3 CVE-2024-45801

Release Notes

cure53/DOMPurify (dompurify) ### [`v3.0.0`](https://redirect.github.com/cure53/DOMPurify/releases/tag/3.0.0): DOMPurify 3.0.0 [Compare Source](https://redirect.github.com/cure53/DOMPurify/compare/2.5.7...3.0.0) - Removed all code that is for MSIE-only - Removed all tests that are for MSIE-only - Modified documentation to reflect new state of MSIE support - Added support for `ALLOW_SELF_CLOSE_IN_ATTR` flag, thanks [@​edg2s](https://redirect.github.com/edg2s) [@​AndreVirtimo](https://redirect.github.com/AndreVirtimo) - Added better support for `shadowrootmode`, thanks [@​mfreed7](https://redirect.github.com/mfreed7) **NOTE** Please use the [2.4.4](https://redirect.github.com/cure53/DOMPurify/releases/tag/2.4.4) release if you still need MSIE support, 3.0.0 comes without the MSIE overhead