Skip to content

Update dompurify dependency to v3.0.5

Dheeraj Joshi requested to merge djadmin-dompurify-v3 into master

Fix https://gitlab.com/gitlab-org/gitlab/-/issues/416735

What does this MR do and why?

This updates the DOMPurify dependency to the latest version https://github.com/cure53/DOMPurify/releases/tag/3.0.5

Some context in !125890 (closed).

Screenshots or screen recordings

No visual changes

How to set up and validate locally

HTML content like markdown, links, svgs, etc. which gets rendered with v-safe-html or DOMPurify.sanitize should work as is.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Dheeraj Joshi

Merge request reports