[Snyk] Upgrade dompurify from 2.2.2 to 2.2.4

[snyk-bot]

Snyk has created this PR to upgrade dompurify from 2.2.2 to 2.2.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2020-12-15.

Release notes

Package name: dompurify

• 2.2.4 - 2020-12-15
  
  • Fixed a new MathML-based bypass submitted by PewGrand
  • Fixed a new SVG-related bypass submitted by SecurityMB
  • Updated NodeJS CI to Node 14.x and Node 15.x
  • Cleaned up _forceRemove logic for better reliability
• 2.2.3 - 2020-12-07
  
  • Fixed an mXSS issue reported by PewGrand
  • Fixed a minor issue with the license header
  • Fixed a problem with overly-eager CSS stripping
  • Updated the README and removed an XSS warning
• 2.2.2 - 2020-11-02
  
  • Fixed an mXSS bypass dropped on us publicly via #482
  • Fixed an mXSS variation that was reported privately short after
  • Added dialog to permitted elements list
  • Fixed a small typo in the README

from dompurify GitHub release notes

Commit messages

Package name: dompurify

• 499b3bb chore: Prepare 2.2.4 release
• 2c186fb doc: updated README and credits section
• 8d41553 test: Removed Node 16 again, not supported yet
• fb08c10 test: Added node 16 to CI
• 80d2c24 docs: changed some CI details in README
• 1b1c6e1 fix: changed _forceRemove logic again
• f321c4a chore: testing new nodejs versions
• b5f85cb hore: removed it again
• 24d740b chore: added lock file to squish errors
• 8f105c3 fix: deleted yarn.lock
• b3f118c chore: updated yarn.lock
• 9b17053 fix: slightly changed the _forceRemove logic, using node.remove() now
• 083b0bf fix: fixed a problem with _forceRemove for XML nodes
• 5fb1451 fix: satisfied new linter rules
• 8caa764 Merge branch 'main' of github.com:cure53/DOMPurify into main
• 06a5f4b fix: reverted last change as it harms older Safari
• c55695d Merge pull request [FEATURE REQUEST] Add option to generate skip link for screen reader users #494 from cure53/dependabot/npm_and_yarn/ini-1.3.8
• a7542e6 fix: removed some superfluous mXSS detection
• 8d2f6d8 chore(deps): bump ini from 1.3.5 to 1.3.8
• 8ab47b0 fix: Testing a more advanced mXSS mitigation strategy for MathML
• c92803d docs: Added a line about using html profiles to README
• e7086f7 chore: prepared 2.2.3 release
• 0c2edea fix: addressed an mXSS problem caused by nested headlines
• 2c0017c see docs language russian #490

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[vercel]

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.

🔍 Inspect: https://vercel.com/docsify-core/docsify-preview/qpndb0s1b
✅ Preview: https://docsify-previe-git-snyk-upgrade-7dedb0390db43a36f224cc12-d30cd1.docsify-core.vercel.app