Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency dompurify to v3.1.6 - autoclosed #154

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 11, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
dompurify 3.1.2 -> 3.1.6 age adoption passing confidence

Release Notes

cure53/DOMPurify (dompurify)

v3.1.6: DOMPurify 3.1.6

Compare Source

  • Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @​kevin-mizu
  • Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks @​realansgar
  • Fixed a minor problem with the bower file pointing to the wrong dist path
  • Fixed several minor typos in docs, comments and comment blocks, thanks @​Rotzbua
  • Updated several development dependencies

v3.1.5: DOMPurify 3.1.5

Compare Source

  • Fixed a minor issue with the dist paths in bower.js, thanks @​HakumenNC
  • Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @​kakao-bishop-cho

v3.1.4: DOMPurify 3.1.4

Compare Source

  • Fixed an issue with the recently implemented isNaN checks, thanks @​tulach
  • Added several new popover attributes to allow-list, thanks @​Gigabyte5671
  • Fixed the tests and adjusted the test runner to cover all branches

v3.1.3: DOMPurify 3.1.3

Compare Source

  • Fixed several mXSS variations found by and thanks to @​kevin-mizu & @​Ry0taK
  • Added better configurability for comment scrubbing default behavior
  • Added better hardening against Prototype Pollution attacks, thanks @​kevin-mizu
  • Added better handling and readability of the nodeType property, thanks @​ssi02014
  • Fixed some smaller issues in README and other documentation

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner May 11, 2024 11:21
@renovate renovate bot temporarily deployed to experimental May 11, 2024 11:21 Inactive
@renovate renovate bot force-pushed the renovate/dompurify-3.x-lockfile branch from e8db109 to 4726f38 Compare May 20, 2024 17:18
@renovate renovate bot changed the title Update dependency dompurify to v3.1.3 Update dependency dompurify to v3.1.4 May 20, 2024
@renovate renovate bot temporarily deployed to experimental May 20, 2024 17:18 Inactive
@renovate renovate bot changed the title Update dependency dompurify to v3.1.4 Update dependency dompurify to v3.1.5 May 31, 2024
@renovate renovate bot force-pushed the renovate/dompurify-3.x-lockfile branch from 4726f38 to fc4aa9e Compare May 31, 2024 11:43
@renovate renovate bot temporarily deployed to experimental May 31, 2024 11:43 Inactive
@renovate renovate bot changed the title Update dependency dompurify to v3.1.5 Update dependency dompurify to v3.1.6 Jul 5, 2024
@renovate renovate bot force-pushed the renovate/dompurify-3.x-lockfile branch from fc4aa9e to 200b9a3 Compare July 5, 2024 13:26
@renovate renovate bot temporarily deployed to experimental July 5, 2024 13:26 Inactive
@renovate renovate bot changed the title Update dependency dompurify to v3.1.6 Update dependency dompurify to v3.1.6 - autoclosed Sep 16, 2024
@renovate renovate bot closed this Sep 16, 2024
@renovate renovate bot deleted the renovate/dompurify-3.x-lockfile branch September 16, 2024 22:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants