Update to dompurify 2.5.7

This fixes CVE-2024-47875O, CVE-2024-45801O, and a few other security vulnerabilities.
TerriaJS · Nov 22, 2024 · 2076977 · 2076977
1 parent 91466b0
commit 2076977
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 5 deletions.
diff --git a/CHANGES.md b/CHANGES.md
@@ -2,6 +2,7 @@
 
 #### next release (8.7.10)
 
+- Update to dompurify 2.5.7 to fix security vulnerabilities.
 - [The next improvement]
 
 #### 8.7.9 - 2024-11-22

diff --git a/package.json b/package.json
@@ -110,7 +110,7 @@
     "d3-transition": "^3.0.1",
     "d3-zoom": "^3.0.0",
     "dateformat": "^3.0.3",
-    "dompurify": "^2.3.3",
+    "dompurify": "^2.5.7",
     "fetch-mock": "^9.11.0",
     "file-loader": "^3.0.1",
     "file-saver": "^1.3.8",

diff --git a/yarn.lock b/yarn.lock
@@ -5127,10 +5127,10 @@ domhandler@^4.0, domhandler@^4.2.0, domhandler@^4.2.2:
   dependencies:
     domelementtype "^2.2.0"
 
-dompurify@^2.3.3:
-  version "2.3.5"
-  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.3.5.tgz#c83ed5a3ae5ce23e52efe654ea052ffb358dd7e3"
-  integrity sha512-kD+f8qEaa42+mjdOpKeztu9Mfx5bv9gVLO6K9jRx4uGvh6Wv06Srn4jr1wPNY2OOUGGSKHNFN+A8MA3v0E0QAQ==
+dompurify@^2.5.7:
+  version "2.5.7"
+  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.5.7.tgz#6e0d36b9177db5a99f18ade1f28579db5ab839d7"
+  integrity sha512-2q4bEI+coQM8f5ez7kt2xclg1XsecaV9ASJk/54vwlfRRNQfDqJz2pzQ8t0Ix/ToBpXlVjrRIx7pFC/o8itG2Q==
 
 dompurify@^3.0.2:
   version "3.0.8"