Bowl42 635e0f4456 chore(deps): bump dompurify from 3.3.1 to 3.3.2 in /frontend (#874) ...

Security fix: XSS bypass via jsdom raw-text tag parsing,
prototype pollution with custom elements, and lenient config
parsing in _isValidAttribute.

Supersedes #872

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-06 12:46:57 +08:00

2.3 KiB

Raw Blame History

View Raw