Use uhtml+dompurify to eliminate XSS potential in search engines

abdelkarimjaja · Nov 17, 2022 · 8696a62 · 8696a62
1 parent 7793986
commit 8696a62
Show file tree

Hide file tree

Showing 4 changed files with 364 additions and 305 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -22,11 +22,13 @@
   "contributors": [],
   "license": "MIT",
   "dependencies": {
-    "github-reserved-names": "^2.0.4"
+    "dompurify": "^2.4.1",
+    "github-reserved-names": "^2.0.4",
+    "uhtml": "^3.1.0"
   },
   "devDependencies": {
     "del": "^7.0.0",
-    "eslint": "8.26.0",
+    "eslint": "8.27.0",
     "eslint-config-airbnb-base": "15.0.0",
     "eslint-plugin-import": "^2.26.0",
     "express": "^4.18.2",
@@ -35,11 +37,11 @@
     "gulp-notify": "^4.0.0",
     "gulp-rename": "^2.0.0",
     "gulp-replace": "^1.1.3",
-    "node-fetch": "^3.2.10",
+    "node-fetch": "^3.3.0",
     "platform-folders": "^0.6.0",
     "to-string-loader": "^1.2.0",
     "unicode": "^14.0.0",
-    "webpack": "^5.74.0",
+    "webpack": "^5.75.0",
     "webpack-stream": "^7.0.0"
   },
   "peerDependencies": {