Skip to content

Commit dee401c

Browse files
Andrei Banshchikovmeta-codesync[bot]
authored andcommitted
Upgrading dompurify package in QuickLayout Docs
Summary: Received an alert on a vulnerability in dompurify package, upgraded direct dep from 3.4.0 to 3.4.1 and added a `resolutions` pin to also force the transitive dompurify@^3.3.1 (resolved to 3.3.3) up to 3.4.1. Mirrors D101617088 approach (yarn `resolutions`). Differential Revision: D102589444 fbshipit-source-id: d5f20a572faf9d62cb6e303f900fd474620c83ce
1 parent 6cfec20 commit dee401c

2 files changed

Lines changed: 12 additions & 13 deletions

File tree

Sources/QuickLayout/docs/package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@
2323
"classnames": "^2.5.1",
2424
"clsx": "^2.0.0",
2525
"docusaurus-plugin-internaldocs-fb": "1.19.2",
26-
"dompurify": "3.4.0",
26+
"dompurify": "3.4.1",
2727
"js-yaml": "^4.1.1",
2828
"loader-utils": "3.3.1",
2929
"prism-react-renderer": "^2.3.0",
@@ -53,6 +53,7 @@
5353
},
5454
"resolutions": {
5555
"brace-expansion": "1.1.13",
56+
"dompurify": "3.4.1",
5657
"express/path-to-regexp": "0.1.13",
5758
"lodash": "4.18.1",
5859
"picomatch": "2.3.2"

Sources/QuickLayout/docs/yarn.lock

Lines changed: 10 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -5205,17 +5205,10 @@ domhandler@^5.0.2, domhandler@^5.0.3:
52055205
dependencies:
52065206
domelementtype "^2.3.0"
52075207

5208-
dompurify@3.4.0:
5209-
version "3.4.0"
5210-
resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-3.4.0.tgz#b1fc33ebdadb373241621e0a30e4ad81573dfd0b"
5211-
integrity sha512-nolgK9JcaUXMSmW+j1yaSvaEaoXYHwWyGJlkoCTghc97KgGDDSnpoU/PlEnw63Ah+TGKFOyY+X5LnxaWbCSfXg==
5212-
optionalDependencies:
5213-
"@types/trusted-types" "^2.0.7"
5214-
5215-
dompurify@^3.3.1:
5216-
version "3.3.3"
5217-
resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-3.3.3.tgz#680cae8af3e61320ddf3666a3bc843f7b291b2b6"
5218-
integrity sha512-Oj6pzI2+RqBfFG+qOaOLbFXLQ90ARpcGG6UePL82bJLtdsa6CYJD7nmiU8MW9nQNOtCHV3lZ/Bzq1X0QYbBZCA==
5208+
dompurify@3.4.1, dompurify@^3.3.1:
5209+
version "3.4.1"
5210+
resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-3.4.1.tgz#521d04483ac12631b2aedf434a5f5390933b8789"
5211+
integrity sha512-JahakDAIg1gyOm7dlgWSDjV4n7Ip2PKR55NIT6jrMfIgLFgWo81vdr1/QGqWtFNRqXP9UV71oVePtjqS2ebnPw==
52195212
optionalDependencies:
52205213
"@types/trusted-types" "^2.0.7"
52215214

@@ -8932,7 +8925,7 @@ path-root@^0.1.1:
89328925
dependencies:
89338926
path-root-regex "^0.1.0"
89348927

8935-
path-to-regexp@0.1.13, path-to-regexp@~0.1.12:
8928+
path-to-regexp@0.1.13:
89368929
version "0.1.13"
89378930
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.13.tgz#9b22ec16bc3ab88d05a0c7e369869421401ab17d"
89388931
integrity sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==
@@ -8949,6 +8942,11 @@ path-to-regexp@^1.7.0:
89498942
dependencies:
89508943
isarray "0.0.1"
89518944

8945+
path-to-regexp@~0.1.12:
8946+
version "0.1.12"
8947+
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.12.tgz#d5e1a12e478a976d432ef3c58d534b9923164bb7"
8948+
integrity sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==
8949+
89528950
path-type@^4.0.0:
89538951
version "4.0.0"
89548952
resolved "https://registry.yarnpkg.com/path-type/-/path-type-4.0.0.tgz#84ed01c0a7ba380afe09d90a8c180dcd9d03043b"

0 commit comments

Comments
 (0)