Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

request #17071: Update to DOMPurify 2.0.17

Download Browse

This fixes a mXSS-based bypass. Changelog: https://github.com/cure53/DOMPurify/releases/tag/2.0.16 https://github.com/cure53/DOMPurify/releases/tag/2.0.17 Change-Id: Ia86f44d38a0638b61c63cc26c8a53057268c819b

+34 −34
Thomas Gerbet (tgerbet) 2020-09-21 09:57
Thomas Gerbet (tgerbet) 2020-09-21 09:57
7ce4df0911d8569ea232840f183500ca052ddbf4
587a189d27f5271a716794f8db883f26de24b16a
git #tuleap/stable/7ce4df0911d8569ea232840f183500ca052ddbf4

Modified Files

Side by side diff
Inline diff
Name
M plugins/api_explorer/package-lock.json +3 −3 Go to diff View file
M plugins/document/package-lock.json +3 −3 Go to diff View file
M plugins/label/package-lock.json +3 −3 Go to diff View file
M plugins/projectmilestones/package-lock.json +3 −3 Go to diff View file
M plugins/taskboard/package-lock.json +3 −3 Go to diff View file
M plugins/taskboard/package.json +1 −1 Go to diff View file
M plugins/testmanagement/package-lock.json +3 −3 Go to diff View file
M plugins/tracker/package-lock.json +3 −3 Go to diff View file
M plugins/tracker/package.json +1 −1 Go to diff View file
M src/package-lock.json +3 −3 Go to diff View file
M src/package.json +1 −1 Go to diff View file
M src/scripts/list-picker/package-lock.json +3 −3 Go to diff View file
M src/themes/tlp/package-lock.json +3 −3 Go to diff View file
M src/themes/tlp/package.json +1 −1 Go to diff View file