[PR #396] [CLOSED] Chore(deps): Bump dompurify from 3.2.1 to 3.2.2 #544

New issue

Closed

opened 2026-03-15 14:25:12 +03:00 by kerem · 0 comments

kerem commented

2026-03-15 14:25:12 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/axllent/mailpit/pull/396
Author: @dependabot[bot]
Created: 12/1/2024
Status: ❌ Closed

Base: develop ← Head: dependabot/npm_and_yarn/dompurify-3.2.2

📝 Commits (1)

22f5127 Chore(deps): Bump dompurify from 3.2.1 to 3.2.2

📊 Changes

2 files changed (+5 additions, -5 deletions)

View changed files

📝 package-lock.json (+4 -4)
📝 package.json (+1 -1)

📄 Description

Bumps dompurify from 3.2.1 to 3.2.2.

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.2

Fixed a possible bypass in case a rather specific config for custom elements is set, thanks @yaniv-git

Fixed several minor issues with the type definitions, thanks again @reduckted

Fixed a minor issue with the types reference for trusted types, thanks @reduckted

Fixed a minor problem with the template detection regex on some systems, thanks @svdb99

Commits

3990b7e Merge pull request #1038 from cure53/main
3b4b5e9 Merge pull request #1037 from svdb99/main
b9e9087 Fix #1033
1162fce Merge branch 'cure53:main' into main
0217da1 Fix #1033
88a937f chore: Preparing 3.2.2 release
e7d44d2 fix: Fixed a possible config-specific bypass via "is" attributes, thanks @Yan...
13e24e5 Fix #1033
cea034c Merge pull request #1036 from reduckted/feature/trusted-types
4722546 Add triple-slash types reference to trusted-types.
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/axllent/mailpit/pull/396 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 12/1/2024 **Status:** ❌ Closed **Base:** `develop` ← **Head:** `dependabot/npm_and_yarn/dompurify-3.2.2` --- ### 📝 Commits (1) - [`22f5127`](https://github.com/axllent/mailpit/commit/22f5127fdd97f1add112cb5fcc7ded3eb86200cf) Chore(deps): Bump dompurify from 3.2.1 to 3.2.2 ### 📊 Changes **2 files changed** (+5 additions, -5 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+4 -4) 📝 `package.json` (+1 -1) </details> ### 📄 Description Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.2.1 to 3.2.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cure53/DOMPurify/releases">dompurify's releases</a>.</em></p> <blockquote> <h2>DOMPurify 3.2.2</h2> <ul> <li>Fixed a possible bypass in case a rather specific config for custom elements is set, thanks <a href="https://github.com/yaniv-git"><code>@yaniv-git</code></a></li> <li>Fixed several minor issues with the type definitions, thanks again <a href="https://github.com/reduckted"><code>@reduckted</code></a></li> <li>Fixed a minor issue with the types reference for trusted types, thanks <a href="https://github.com/reduckted"><code>@reduckted</code></a></li> <li>Fixed a minor problem with the template detection regex on some systems, thanks <a href="https://github.com/svdb99"><code>@svdb99</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cure53/DOMPurify/commit/3990b7e925285fa7fc9d63150e91d8e448215737"><code>3990b7e</code></a> Merge pull request <a href="https://redirect.github.com/cure53/DOMPurify/issues/1038">#1038</a> from cure53/main</li> <li><a href="https://github.com/cure53/DOMPurify/commit/3b4b5e928089a0c39c52a8b31513f2d5ae1a494e"><code>3b4b5e9</code></a> Merge pull request <a href="https://redirect.github.com/cure53/DOMPurify/issues/1037">#1037</a> from svdb99/main</li> <li><a href="https://github.com/cure53/DOMPurify/commit/b9e9087df30bd2cf9b76245da8eb628dc815531d"><code>b9e9087</code></a> Fix <a href="https://redirect.github.com/cure53/DOMPurify/issues/1033">#1033</a></li> <li><a href="https://github.com/cure53/DOMPurify/commit/1162fce144e17b9ebd743091aa1aebc51bddc5be"><code>1162fce</code></a> Merge branch 'cure53:main' into main</li> <li><a href="https://github.com/cure53/DOMPurify/commit/0217da11a11e8da6a1510b3a395da0fc214e862f"><code>0217da1</code></a> Fix <a href="https://redirect.github.com/cure53/DOMPurify/issues/1033">#1033</a></li> <li><a href="https://github.com/cure53/DOMPurify/commit/88a937f1ce9c4ea7c47ace5b2d47cea629e3134d"><code>88a937f</code></a> chore: Preparing 3.2.2 release</li> <li><a href="https://github.com/cure53/DOMPurify/commit/e7d44d28d13437739ceaeb8a1dff5cf1effb89f4"><code>e7d44d2</code></a> fix: Fixed a possible config-specific bypass via "is" attributes, thanks <a href="https://github.com/Yan"><code>@Yan</code></a>...</li> <li><a href="https://github.com/cure53/DOMPurify/commit/13e24e5af9e39a923d75d9b02d3ea992289ff9b6"><code>13e24e5</code></a> Fix <a href="https://redirect.github.com/cure53/DOMPurify/issues/1033">#1033</a></li> <li><a href="https://github.com/cure53/DOMPurify/commit/cea034c092d382b81e3eeb2087f6e48ae86beea2"><code>cea034c</code></a> Merge pull request <a href="https://redirect.github.com/cure53/DOMPurify/issues/1036">#1036</a> from reduckted/feature/trusted-types</li> <li><a href="https://github.com/cure53/DOMPurify/commit/47225463a1634bcc0213f8b18d8c00ccb4111652"><code>4722546</code></a> Add triple-slash types reference to trusted-types.</li> <li>Additional commits viewable in <a href="https://github.com/cure53/DOMPurify/compare/3.2.1...3.2.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dompurify&package-manager=npm_and_yarn&previous-version=3.2.1&new-version=3.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>