Merge pull request #5914 from aloisklink/fix/5904-ban-dompurify-3.1.7

fix: ban version v3.1.7 of DOMPurify
mermaid-js · Oct 1, 2024 · a5559c6 · a5559c6
2 parents b3dee34 + de2c05c
commit a5559c6
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 2 deletions.
diff --git a/.changeset/witty-rabbits-hunt.md b/.changeset/witty-rabbits-hunt.md
@@ -0,0 +1,5 @@
+---
+'mermaid': patch
+---
+
+Ban DOMPurify v3.1.7 as a dependency
diff --git a/packages/mermaid/package.json b/packages/mermaid/package.json
@@ -77,7 +77,7 @@
     "d3-sankey": "^0.12.3",
     "dagre-d3-es": "7.0.10",
     "dayjs": "^1.11.10",
-    "dompurify": "^3.0.11",
+    "dompurify": "^3.0.11 <3.1.7",
     "katex": "^0.16.9",
     "khroma": "^2.1.0",
     "lodash-es": "^4.17.21",

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml