Merge pull request #544 from kagemomiji/dependabot/maven/cxf.version-…

…4.0.5

chore(deps): bump cxf.version from 4.0.4 to 4.0.5

airsonic-main/pom.xml

@@ -412,7 +412,7 @@
         <dependency>
             <groupId>org.apache.cxf</groupId>
             <artifactId>cxf-spring-boot-autoconfigure</artifactId>
-            <version>4.0.4</version>
+            <version>4.0.5</version>
         </dependency>
 
         <dependency>

airsonic-main/src/main/resources/templates/podcastChannel.html

@@ -54,7 +54,7 @@
 
             feather.replace();
             Array.from(document.querySelectorAll('svg.feather[title]')).forEach((element) => {
-               element.insertAdjacentHTML('afterbegin', `<title>${element.attributes.title.value}</title>`);
+               element.insertAdjacentHTML('afterbegin', `<title>${DOMPurify.sanitize(element.attributes.title.value)}</title>`);
             });
             countSelected();
         }

pom.xml

@@ -25,7 +25,7 @@
         <failOnDependencyWarning>true</failOnDependencyWarning>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <java.version>17</java.version>
-        <cxf.version>4.0.4</cxf.version>
+        <cxf.version>4.0.5</cxf.version>
         <snakeyaml.version>2.2</snakeyaml.version>
         <lucene.version>9.11.1</lucene.version>
         <docker.container.repo>ghcr.io/kagemomiji/airsonic-advanced</docker.container.repo>
@@ -161,7 +161,7 @@
             <dependency>
                 <groupId>com.google.errorprone</groupId>
                 <artifactId>error_prone_annotations</artifactId>
-                <version>2.28.0</version>
+                <version>2.29.2</version>
             </dependency>
             <dependency>
                 <groupId>net.java.dev.jna</groupId>
@@ -280,7 +280,7 @@
                 <plugin>
                     <groupId>org.owasp</groupId>
                     <artifactId>dependency-check-maven</artifactId>
-                    <version>10.0.2</version>
+                    <version>10.0.3</version>
                     <inherited>true</inherited>
                     <configuration>
                         <cveValidForHours>24</cveValidForHours>