Update dependency dompurify to v2.1.0 #245

renovate · 2020-09-23T09:02:24Z

renovate commented

2020-09-23 09:02:24 +00:00

This PR contains the following updates:

Package	Type	Update	Change
dompurify	dependencies	minor	`2.0.17` -> `2.1.0`

Release Notes

cure53/DOMPurify

`v2.1.0`

Compare Source

Fixed several possible mXSS patterns, thanks @hackvertor
Removed the SAFE_FOR_JQUERY flag (we are safe by default now for jQuery)
Removed several now useless mXSS checks
Updated the mXSS check for elements
Updated test cases to cover new sanitization strategy
Updated test website to use newer jQuery
Updated array of tested browsers and removed legacy browsers
Added "auto convert" checkbox to test website, thanks @hackvertor

Renovate configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [dompurify](https://github.com/cure53/DOMPurify) | dependencies | minor | [`2.0.17` -> `2.1.0`](https://renovatebot.com/diffs/npm/dompurify/2.0.17/2.1.0) | --- ### Release Notes <details> <summary>cure53/DOMPurify</summary> ### [`v2.1.0`](https://github.com/cure53/DOMPurify/releases/2.1.0) [Compare Source](https://github.com/cure53/DOMPurify/compare/2.0.17...2.1.0) - Fixed several possible mXSS patterns, thanks [@hackvertor](https://github.com/hackvertor) - Removed the `SAFE_FOR_JQUERY` flag (we are safe by default now for jQuery) - Removed several now useless mXSS checks - Updated the mXSS check for elements - Updated test cases to cover new sanitization strategy - Updated test website to use newer jQuery - Updated array of tested browsers and removed legacy browsers - Added "auto convert" checkbox to test website, thanks [@hackvertor](https://github.com/hackvertor) </details> --- ### Renovate configuration 📅 **Schedule**: At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻️ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate added the

dependencies

label 2020-09-23 09:02:24 +00:00

renovate added 1 commit 2020-09-23 09:02:24 +00:00