netlify[bot]
commented
1 year ago Deploy Preview for otlio ready!
| Name | Link |
|---|---|
| Latest commit | c5e23bd532378c3c1c47653812d444de4b017b27 |
| Latest deploy log | https://app.netlify.com/sites/otlio/deploys/641ce08c779b9a0008c07cfa |
| Deploy Preview | https://deploy-preview-407--otlio.netlify.app/ |
| Preview on mobile | Toggle QR Code...Use your smartphone camera to open QR code link. |
To edit notification comments on pull requests, go to your Netlify site settings.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade dompurify from 2.4.0 to 2.4.5.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **5 versions** ahead of your current version. - The recommended version was released **22 days ago**, on 2023-03-01.
Release notes
Package name: dompurify
-
2.4.5 - 2023-03-01
- Fixed a problem with improper reset of custom HTML options, thanks @ ammaraskar
-
2.4.4 - 2023-02-13
- Added support for
- Added better support for
-
2.4.3 - 2023-01-06
- Final release that is compatible with MSIE10 & MSIE 11
-
2.4.2 - 2023-01-05
- Fixed a Trusted Types sink violation with empty input and NAMESPACE , thanks @ tosmolka
- Fixed a Prototype Pollution issue discovered and reported by @ kevin-mizu
-
2.4.1 - 2022-11-10
- Added new config option
- Added better detection of template literals when
- Fixed an exception caused by DOM clobbering, thanks @ masatokinugawa
- Bumped some dependencies, thanks @ marcpenya-tf
-
2.4.0 - 2022-08-24
- Removed bundled types again as they caused too much trouble
from dompurify GitHub release notesALLOW_SELF_CLOSE_IN_ATTRflag, thanks @ edg2s @ AndreVirtimoshadowrootmode, thanks @ mfreed7ALLOWED_NAMESPACESfor better XML handling, thanks @ kevin-deyoungster @ tosmolkaSAFE_FOR_TEMPLATESistrueCommit messages
Package name: dompurify
- f464d95 chore: preparing 2.4.5 release
- fa4e8ee chore: preparing 2.4.4 release
- f5c25ac see #767
- 08e9fab test: Added 2.x tag to 2.x branch actions
- 5f766bc See #761
- 90326ef Merge pull request #750 from cure53/dependabot/npm_and_yarn/json5-1.0.2
- fade506 chore: Prepare 2.4.3, final feature release compatible w. MSIE10/11
- 3afe389 build(deps): bump json5 from 1.0.1 to 1.0.2
- f1e180f fix: merged from latest main
- 7707778 Update README.md
- 5267b04 chore: Preparing 2.4.2 release
- d1dd037 fix: Fixed a prototype pollution bug reported by @ kevin_mizu
- 24d2a7f Merge pull request #748 from tosmolka/tosmolka/747
- 7de86a0 Fix formatting
- 191cc00 Fix Trusted Types Sink violation with empty input and NAMESPACE
- 4945074 Merge pull request #745 from cure53/dependabot/npm_and_yarn/qs-and-body-parser-6.11.0
- 7e9fcd9 build(deps): bump qs and body-parser
- 2734b2d Merge pull request #737 from cure53/dependabot/npm_and_yarn/engine.io-and-socket.io-6.2.1
- f3b68d9 build(deps): bump engine.io and socket.io
- 9a751e4 Merge pull request #732 from Pomierski/patch-1
- 2c03b6c fix
- 7477926 chore: fix allowCustomizedBuiltInElements comment in readme
- 67f784c chore: preparing 2.4.1 release
- e50e814 Merge pull request #731 from cure53/dependabot/npm_and_yarn/minimatch-3.1.2
Compare**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: