fix: package.json & package-lock.json to reduce vulnerabilities (#1419)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-DOMPURIFY-1035544

Co-authored-by: 沈唁 <52o@qq52o.cn>
This commit is contained in:
Snyk bot 2020-11-16 08:18:03 +02:00 committed by GitHub
parent e75a19ca05
commit 69b6907c86
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 4 deletions

6
package-lock.json generated
View File

@ -7215,9 +7215,9 @@
}
},
"dompurify": {
"version": "2.1.1",
"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.1.1.tgz",
"integrity": "sha512-NijiNVkS/OL8mdQL1hUbCD6uty/cgFpmNiuFxrmJ5YPH2cXrPKIewoixoji56rbZ6XBPmtM8GA8/sf9unlSuwg=="
"version": "2.2.2",
"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.2.2.tgz",
"integrity": "sha512-BsGR4nDLaC5CNBnyT5I+d5pOeaoWvgVeg6Gq/aqmKYWMPR07131u60I80BvExLAJ0FQEIBQ1BTicw+C5+jOyrg=="
},
"domutils": {
"version": "1.7.0",

View File

@ -54,7 +54,7 @@
"*.js": "eslint --fix"
},
"dependencies": {
"dompurify": "^2.0.8",
"dompurify": "^2.2.2",
"marked": "^1.2.2",
"medium-zoom": "^1.0.6",
"opencollective-postinstall": "^2.0.2",