lakeFS
lakeFS copied to clipboard
Bump dompurify from 3.1.7 to 3.2.4 in /webui
Bumps dompurify from 3.1.7 to 3.2.4.
Release notes
Sourced from dompurify's releases.
DOMPurify 3.2.4
- Fixed a conditional and config dependent mXSS-style bypass reported by
@nsysean- Added a new feature to allow specific hook removal, thanks
@davecardwell- Added purify.js and purify.min.js to exports, thanks
@Aetherinox- Added better logic in case no window object is president, thanks
@yehuya- Updated some dependencies called out by dependabot
- Updated license files etc to show the correct year
DOMPurify 3.2.3
- Fixed two conditional sanitizer bypasses discovered by
@parrot409and@Slonser- Updated the attribute clobbering checks to prevent future bypasses, thanks
@parrot409DOMPurify 3.2.2
- Fixed a possible bypass in case a rather specific config for custom elements is set, thanks
@yaniv-git- Fixed several minor issues with the type definitions, thanks again
@reduckted- Fixed a minor issue with the types reference for trusted types, thanks
@reduckted- Fixed a minor problem with the template detection regex on some systems, thanks
@svdb99DOMPurify 3.2.1
- Fixed several minor issues with the type definitions, thanks
@reduckted@ghiscoding@asamuzaK@MiniDigger- Fixed an issue with non-minified dist files and order of imports, thanks
@reducktedDOMPurify 3.2.0
- Added type declarations, thanks
@reduckted,@philmayfield,@aloisklink,@ssi02014and others- Fixed a minor issue with the handling of hooks, thanks
@kevin-mizu
Commits
ec29e65Merge pull request #1062 from cure53/main1c1b183chore: Preparing 3.2.4 released18ffcbfix: Changed the template literal regex to avoid a config-dependent bypass0d64d2bMerge pull request #1060 from yehuya/initializeTestImprovements9ad7933tests: DOMPurify custom window tests improvements72760caMerge pull request #1059 from yehuya/fixMissingWindowElementbc72d44Fix tests363a89dfix: handle undefined Element in DOMPurify initializationf41b45dUpdate LICENSEb25bf26Update README.md- Additional commits viewable in compare view
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.
Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
E2E Test Results - DynamoDB Local - Local Block Adapter