scriptoriumadmin/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-10-28 06:22:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

chore: bump DOMPurify to 3.4.17 (#32863)

Browse source 
The web UI still shipped version 3.4.11 of DOMPurify, the library that strips unsafe HTML before content is shown, six releases behind DOMPurify's own latest. This moves it to 3.4.17, and new installs now require at least that version.

Co-authored-by: wesyoung2022 <115102004+wesyoung2022@users.noreply.github.com>
This commit is contained in:
Classic298 2026-10-21 23:12:24 +02:00 • committed by GitHub
parent cb7d7e851d
commit 61653e9697
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
package-lock.json generated
View file

@ -56,7 +56,7 @@
"crc-32": "^1.2.2",
"dayjs": "^1.11.10",
"docx-preview": "0.4.0",
"dompurify": "^3.2.6",
"dompurify": "^3.4.17",
"eventsource-parser": "^1.1.2",
"fast-deep-equal": "^3.1.3",
"file-saver": "^2.0.5",
@ -7915,9 +7915,9 @@
}
},
"node_modules/dompurify": {
"version": "3.4.11",
"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.11.tgz",
"integrity": "sha512-zhlUV12GsaRzMsf9q5M254YhA4+VuF0fG+QFqu6aYpoGlKtz+w8//jBcGVYBgQkR5GHjUomejY84AV+/uPbWdw==",
"version": "3.4.17",
"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.17.tgz",
"integrity": "sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w==",
"license": "(MPL-2.0 OR Apache-2.0)",
"optionalDependencies": {
"@types/trusted-types": "^2.0.7"

2
package.json
View file

@ -106,7 +106,7 @@
"crc-32": "^1.2.2",
"dayjs": "^1.11.10",
"docx-preview": "0.4.0",
"dompurify": "^3.2.6",
"dompurify": "^3.4.17",
"eventsource-parser": "^1.1.2",
"fast-deep-equal": "^3.1.3",
"file-saver": "^2.0.5",