Skip to content

[stable35] build(deps): bump dompurify from 3.4.13 to 3.4.14 in /build/frontend-legacy - #63618

Merged
AndyScherzinger merged 2 commits into
stable35from
dependabot/npm_and_yarn/build/frontend-legacy/stable35/dompurify-3.4.14
Aug 28, 2026
Merged

[stable35] build(deps): bump dompurify from 3.4.13 to 3.4.14 in /build/frontend-legacy#63618
AndyScherzinger merged 2 commits into
stable35from
dependabot/npm_and_yarn/build/frontend-legacy/stable35/dompurify-3.4.14

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps dompurify from 3.4.13 to 3.4.14.

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions
Commits

@dependabot
dependabot Bot requested review from a team as code owners August 25, 2026 14:32
@dependabot
dependabot Bot requested review from kristian-zendato, skjnldsv and sorbaugh and removed request for a team August 25, 2026 14:32
@AndyScherzinger AndyScherzinger added this to the Nextcloud 35 milestone Aug 25, 2026
@AndyScherzinger

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/build/frontend-legacy/stable35/dompurify-3.4.14 branch from c8cb209 to 93ce480 Compare August 28, 2026 18:40
@github-actions github-actions Bot changed the title build(deps): bump dompurify from 3.4.13 to 3.4.14 in /build/frontend-legacy [stable35] build(deps): bump dompurify from 3.4.13 to 3.4.14 in /build/frontend-legacy Aug 28, 2026
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.13 to 3.4.14.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.14)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@AndyScherzinger
AndyScherzinger force-pushed the dependabot/npm_and_yarn/build/frontend-legacy/stable35/dompurify-3.4.14 branch from 93ce480 to 15aeded Compare August 28, 2026 19:02
@AndyScherzinger

Copy link
Copy Markdown
Member

/compile

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
@AndyScherzinger
AndyScherzinger merged commit 10b685b into stable35 Aug 28, 2026
128 of 131 checks passed
@AndyScherzinger
AndyScherzinger deleted the dependabot/npm_and_yarn/build/frontend-legacy/stable35/dompurify-3.4.14 branch August 28, 2026 19:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants