From 0137cf383a81e0a2a0f5db7c2ded4b4a55c5e2fc Mon Sep 17 00:00:00 2001 From: Shyam Sunder Date: Tue, 23 Jun 2020 13:24:59 -0400 Subject: client/markdown: use DOMPurify over marked.js sanitizer See markedjs/marked#1232 --- client/package-lock.json | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'client/package-lock.json') diff --git a/client/package-lock.json b/client/package-lock.json index 0c02ffd..c8d8872 100644 --- a/client/package-lock.json +++ b/client/package-lock.json @@ -1740,6 +1740,11 @@ "integrity": "sha512-jnjyiM6eRyZl2H+W8Q/zLMA481hzi0eszAaBUzIVnmYVDBbnLxVNnfu1HgEBvCbL+71FrxMl3E6lpKH7Ge3OXA==", "dev": true }, + "dompurify": { + "version": "2.0.11", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.0.11.tgz", + "integrity": "sha512-qVoGPjIW9IqxRij7klDQQ2j6nSe4UNWANBhZNLnsS7ScTtLb+3YdxkRY8brNTpkUiTtcXsCJO+jS0UCDfenLuA==" + }, "duplexer2": { "version": "0.1.4", "resolved": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.1.4.tgz", -- cgit v1.3