From af180616a923b1cd9eb1275b9de326f1221f5cf9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 3 Sep 2021 21:06:53 +0000 Subject: [PATCH 1/5] fix: upgrade dompurify from 2.3.0 to 2.3.1 Snyk has created this PR to upgrade dompurify from 2.3.0 to 2.3.1. See this package in npm: https://www.npmjs.com/package/dompurify See this project in Snyk: https://app.snyk.io/org/anikethsaha/project/836f877b-b98e-47ed-89fc-554e9b2e146d?utm_source=github&utm_medium=upgrade-pr --- package-lock.json | 124 ++-------------------------------------------- package.json | 2 +- 2 files changed, 4 insertions(+), 122 deletions(-) diff --git a/package-lock.json b/package-lock.json index aa445aa7d..fb706f886 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4346,101 +4346,6 @@ } } }, - "@vue/compiler-core": { - "version": "3.2.7", - "resolved": "https://registry.npmjs.org/@vue/compiler-core/-/compiler-core-3.2.7.tgz", - "integrity": "sha512-OcWy72QNTkcNYtZIb927pRx2cRujrlDWsAx7ejWDnRzwo83gIyF8NeTrMv/7wbnHoeA+Gga9AK4Wo9PlCzhuLg==", - "dev": true, - "requires": { - "@babel/parser": "^7.15.0", - "@babel/types": "^7.15.0", - "@vue/shared": "3.2.7", - "estree-walker": "^2.0.2", - "source-map": "^0.6.1" - }, - "dependencies": { - "@babel/helper-validator-identifier": { - "version": "7.14.9", - "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.14.9.tgz", - "integrity": "sha512-pQYxPY0UP6IHISRitNe8bsijHex4TWZXi2HwKVsjPiltzlhse2znVcm9Ace510VT1kxIHjGJCZZQBX2gJDbo0g==", - "dev": true - }, - "@babel/parser": { - "version": "7.15.3", - "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.15.3.tgz", - "integrity": "sha512-O0L6v/HvqbdJawj0iBEfVQMc3/6WP+AeOsovsIgBFyJaG+W2w7eqvZB7puddATmWuARlm1SX7DwxJ/JJUnDpEA==", - "dev": true - }, - "@babel/types": { - "version": "7.15.0", - "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.15.0.tgz", - "integrity": "sha512-OBvfqnllOIdX4ojTHpwZbpvz4j3EWyjkZEdmjH0/cgsd6QOdSgU8rLSk6ard/pcW7rlmjdVSX/AWOaORR1uNOQ==", - "dev": true, - "requires": { - "@babel/helper-validator-identifier": "^7.14.9", - "to-fast-properties": "^2.0.0" - } - }, - "estree-walker": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-2.0.2.tgz", - "integrity": "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w==", - "dev": true - }, - "source-map": { - "version": "0.6.1", - "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz", - "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==", - "dev": true - } - } - }, - "@vue/compiler-dom": { - "version": "3.2.7", - "resolved": "https://registry.npmjs.org/@vue/compiler-dom/-/compiler-dom-3.2.7.tgz", - "integrity": "sha512-YZyZNoZlTbTMqyY8QMC8IhwmcDVOiE1DdVwjnXbyihg+XVqpGQkDjNcG5nyMTbtZDKXREsYkcjaZntEfKyWK5g==", - "dev": true, - "requires": { - "@vue/compiler-core": "3.2.7", - "@vue/shared": "3.2.7" - } - }, - "@vue/reactivity": { - "version": "3.2.7", - "resolved": "https://registry.npmjs.org/@vue/reactivity/-/reactivity-3.2.7.tgz", - "integrity": "sha512-VDeQiZs6s5m1W7hIX+vzmokDCHPEKNYrSxoHWXj4MiGamcT5XZxACj/VXOCK9c6qz36qK5EQOfDWtmVhxfI2hQ==", - "dev": true, - "requires": { - "@vue/shared": "3.2.7" - } - }, - "@vue/runtime-core": { - "version": "3.2.7", - "resolved": "https://registry.npmjs.org/@vue/runtime-core/-/runtime-core-3.2.7.tgz", - "integrity": "sha512-vY3XwE671KDFf4onRrQZdRmkT+0Jr6wrifTO+JwrB6Q9hNiB064TgmiBXqoovjuQW5BmJw5Lkz3u+pG8FE8Egw==", - "dev": true, - "requires": { - "@vue/reactivity": "3.2.7", - "@vue/shared": "3.2.7" - } - }, - "@vue/runtime-dom": { - "version": "3.2.7", - "resolved": "https://registry.npmjs.org/@vue/runtime-dom/-/runtime-dom-3.2.7.tgz", - "integrity": "sha512-yuUmc8haFHrDqoU10JV3Fjd3G5Wz/ID+a/XMs0U68vhDLFsTBejhLX4il8Ga8nv+wrdwuGFwEE8t6APS67PxyA==", - "dev": true, - "requires": { - "@vue/runtime-core": "3.2.7", - "@vue/shared": "3.2.7", - "csstype": "^2.6.8" - } - }, - "@vue/shared": { - "version": "3.2.7", - "resolved": "https://registry.npmjs.org/@vue/shared/-/shared-3.2.7.tgz", - "integrity": "sha512-YwGOcNZjOY/MmadpzFBXWyHEwZSf0lVU4XF5zpD7tXC9dmqjdo38Jkk06wATu4LYHDPW4emXKMB5YLFPWPkwFA==", - "dev": true - }, "@zkochan/cmd-shim": { "version": "3.1.0", "resolved": "https://registry.npmjs.org/@zkochan/cmd-shim/-/cmd-shim-3.1.0.tgz", @@ -6910,12 +6815,6 @@ } } }, - "csstype": { - "version": "2.6.17", - "resolved": "https://registry.npmjs.org/csstype/-/csstype-2.6.17.tgz", - "integrity": "sha512-u1wmTI1jJGzCJzWndZo8mk4wnPTZd1eOIYTYvuEyOQGfmDl3TrabCCfKnOC86FZwW/9djqTl933UF/cS425i9A==", - "dev": true - }, "currently-unhandled": { "version": "0.4.1", "resolved": "https://registry.npmjs.org/currently-unhandled/-/currently-unhandled-0.4.1.tgz", @@ -7265,9 +7164,9 @@ } }, "dompurify": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.3.0.tgz", - "integrity": "sha512-VV5C6Kr53YVHGOBKO/F86OYX6/iLTw2yVSI721gKetxpHCK/V5TaLEf9ODjRgl1KLSWRMY6cUhAbv/c+IUnwQw==" + "version": "2.3.1", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.3.1.tgz", + "integrity": "sha512-xGWt+NHAQS+4tpgbOAI08yxW0Pr256Gu/FNE2frZVTbgrBUn8M7tz7/ktS/LZ2MHeGqz6topj0/xY+y8R5FBFw==" }, "domutils": { "version": "1.7.0", @@ -20256,23 +20155,6 @@ "integrity": "sha512-DRibZL6DsNhIgYQ+wNdWDL2SL3bKPlVrRiBqV5yuMm++op8W4kGFtaQfCs4KEJn0wBZcHVHJ3eoywX8983k1ow==", "dev": true }, - "vue2": { - "version": "npm:vue@2.6.14", - "resolved": "https://registry.npmjs.org/vue/-/vue-2.6.14.tgz", - "integrity": "sha512-x2284lgYvjOMj3Za7kqzRcUSxBboHqtgRE2zlos1qWaOye5yUmHn42LB1250NJBLRwEcdrB0JRwyPTEPhfQjiQ==", - "dev": true - }, - "vue3": { - "version": "npm:vue@3.2.7", - "resolved": "https://registry.npmjs.org/vue/-/vue-3.2.7.tgz", - "integrity": "sha512-kqPYCbvw6rthEA41K45dqxV+C0yrQX24zs1ZmGZTi4Sk6WkzNK8tH4jGd0yAW+lu72E+HQmz0ZhNo6zAT/WKUA==", - "dev": true, - "requires": { - "@vue/compiler-dom": "3.2.7", - "@vue/runtime-dom": "3.2.7", - "@vue/shared": "3.2.7" - } - }, "w3c-hr-time": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/w3c-hr-time/-/w3c-hr-time-1.0.2.tgz", diff --git a/package.json b/package.json index 984f8721d..cc435fde7 100644 --- a/package.json +++ b/package.json @@ -54,7 +54,7 @@ "*.js": "eslint --fix" }, "dependencies": { - "dompurify": "^2.3.0", + "dompurify": "^2.3.1", "marked": "^1.2.9", "medium-zoom": "^1.0.6", "opencollective-postinstall": "^2.0.2", From ac95725bd2fef3c2739f0c582a6dea36e1516f71 Mon Sep 17 00:00:00 2001 From: i544693 <369491420@qq.com> Date: Sun, 12 Sep 2021 19:59:32 +0800 Subject: [PATCH 2/5] fix: fix dependency. --- package-lock.json | 118 ++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 118 insertions(+) diff --git a/package-lock.json b/package-lock.json index fb706f886..0525f260f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4346,6 +4346,101 @@ } } }, + "@vue/compiler-core": { + "version": "3.2.7", + "resolved": "https://registry.npmjs.org/@vue/compiler-core/-/compiler-core-3.2.7.tgz", + "integrity": "sha512-OcWy72QNTkcNYtZIb927pRx2cRujrlDWsAx7ejWDnRzwo83gIyF8NeTrMv/7wbnHoeA+Gga9AK4Wo9PlCzhuLg==", + "dev": true, + "requires": { + "@babel/parser": "^7.15.0", + "@babel/types": "^7.15.0", + "@vue/shared": "3.2.7", + "estree-walker": "^2.0.2", + "source-map": "^0.6.1" + }, + "dependencies": { + "@babel/helper-validator-identifier": { + "version": "7.14.9", + "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.14.9.tgz", + "integrity": "sha512-pQYxPY0UP6IHISRitNe8bsijHex4TWZXi2HwKVsjPiltzlhse2znVcm9Ace510VT1kxIHjGJCZZQBX2gJDbo0g==", + "dev": true + }, + "@babel/parser": { + "version": "7.15.3", + "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.15.3.tgz", + "integrity": "sha512-O0L6v/HvqbdJawj0iBEfVQMc3/6WP+AeOsovsIgBFyJaG+W2w7eqvZB7puddATmWuARlm1SX7DwxJ/JJUnDpEA==", + "dev": true + }, + "@babel/types": { + "version": "7.15.0", + "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.15.0.tgz", + "integrity": "sha512-OBvfqnllOIdX4ojTHpwZbpvz4j3EWyjkZEdmjH0/cgsd6QOdSgU8rLSk6ard/pcW7rlmjdVSX/AWOaORR1uNOQ==", + "dev": true, + "requires": { + "@babel/helper-validator-identifier": "^7.14.9", + "to-fast-properties": "^2.0.0" + } + }, + "estree-walker": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-2.0.2.tgz", + "integrity": "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w==", + "dev": true + }, + "source-map": { + "version": "0.6.1", + "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz", + "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==", + "dev": true + } + } + }, + "@vue/compiler-dom": { + "version": "3.2.7", + "resolved": "https://registry.npmjs.org/@vue/compiler-dom/-/compiler-dom-3.2.7.tgz", + "integrity": "sha512-YZyZNoZlTbTMqyY8QMC8IhwmcDVOiE1DdVwjnXbyihg+XVqpGQkDjNcG5nyMTbtZDKXREsYkcjaZntEfKyWK5g==", + "dev": true, + "requires": { + "@vue/compiler-core": "3.2.7", + "@vue/shared": "3.2.7" + } + }, + "@vue/reactivity": { + "version": "3.2.7", + "resolved": "https://registry.npmjs.org/@vue/reactivity/-/reactivity-3.2.7.tgz", + "integrity": "sha512-VDeQiZs6s5m1W7hIX+vzmokDCHPEKNYrSxoHWXj4MiGamcT5XZxACj/VXOCK9c6qz36qK5EQOfDWtmVhxfI2hQ==", + "dev": true, + "requires": { + "@vue/shared": "3.2.7" + } + }, + "@vue/runtime-core": { + "version": "3.2.7", + "resolved": "https://registry.npmjs.org/@vue/runtime-core/-/runtime-core-3.2.7.tgz", + "integrity": "sha512-vY3XwE671KDFf4onRrQZdRmkT+0Jr6wrifTO+JwrB6Q9hNiB064TgmiBXqoovjuQW5BmJw5Lkz3u+pG8FE8Egw==", + "dev": true, + "requires": { + "@vue/reactivity": "3.2.7", + "@vue/shared": "3.2.7" + } + }, + "@vue/runtime-dom": { + "version": "3.2.7", + "resolved": "https://registry.npmjs.org/@vue/runtime-dom/-/runtime-dom-3.2.7.tgz", + "integrity": "sha512-yuUmc8haFHrDqoU10JV3Fjd3G5Wz/ID+a/XMs0U68vhDLFsTBejhLX4il8Ga8nv+wrdwuGFwEE8t6APS67PxyA==", + "dev": true, + "requires": { + "@vue/runtime-core": "3.2.7", + "@vue/shared": "3.2.7", + "csstype": "^2.6.8" + } + }, + "@vue/shared": { + "version": "3.2.7", + "resolved": "https://registry.npmjs.org/@vue/shared/-/shared-3.2.7.tgz", + "integrity": "sha512-YwGOcNZjOY/MmadpzFBXWyHEwZSf0lVU4XF5zpD7tXC9dmqjdo38Jkk06wATu4LYHDPW4emXKMB5YLFPWPkwFA==", + "dev": true + }, "@zkochan/cmd-shim": { "version": "3.1.0", "resolved": "https://registry.npmjs.org/@zkochan/cmd-shim/-/cmd-shim-3.1.0.tgz", @@ -6815,6 +6910,12 @@ } } }, + "csstype": { + "version": "2.6.17", + "resolved": "https://registry.npmjs.org/csstype/-/csstype-2.6.17.tgz", + "integrity": "sha512-u1wmTI1jJGzCJzWndZo8mk4wnPTZd1eOIYTYvuEyOQGfmDl3TrabCCfKnOC86FZwW/9djqTl933UF/cS425i9A==", + "dev": true + }, "currently-unhandled": { "version": "0.4.1", "resolved": "https://registry.npmjs.org/currently-unhandled/-/currently-unhandled-0.4.1.tgz", @@ -20155,6 +20256,23 @@ "integrity": "sha512-DRibZL6DsNhIgYQ+wNdWDL2SL3bKPlVrRiBqV5yuMm++op8W4kGFtaQfCs4KEJn0wBZcHVHJ3eoywX8983k1ow==", "dev": true }, + "vue2": { + "version": "npm:vue@2.6.14", + "resolved": "https://registry.npmjs.org/vue/-/vue-2.6.14.tgz", + "integrity": "sha512-x2284lgYvjOMj3Za7kqzRcUSxBboHqtgRE2zlos1qWaOye5yUmHn42LB1250NJBLRwEcdrB0JRwyPTEPhfQjiQ==", + "dev": true + }, + "vue3": { + "version": "npm:vue@3.2.7", + "resolved": "https://registry.npmjs.org/vue/-/vue-3.2.7.tgz", + "integrity": "sha512-kqPYCbvw6rthEA41K45dqxV+C0yrQX24zs1ZmGZTi4Sk6WkzNK8tH4jGd0yAW+lu72E+HQmz0ZhNo6zAT/WKUA==", + "dev": true, + "requires": { + "@vue/compiler-dom": "3.2.7", + "@vue/runtime-dom": "3.2.7", + "@vue/shared": "3.2.7" + } + }, "w3c-hr-time": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/w3c-hr-time/-/w3c-hr-time-1.0.2.tgz", From cab0dd22f92ec0272fc6cea28f456e5d1ddfea65 Mon Sep 17 00:00:00 2001 From: i544693 <369491420@qq.com> Date: Sun, 12 Sep 2021 20:01:02 +0800 Subject: [PATCH 3/5] fix: fix dependency. --- package-lock.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package-lock.json b/package-lock.json index 0525f260f..d40f33375 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4346,7 +4346,7 @@ } } }, - "@vue/compiler-core": { + "@vue/compiler-core": { "version": "3.2.7", "resolved": "https://registry.npmjs.org/@vue/compiler-core/-/compiler-core-3.2.7.tgz", "integrity": "sha512-OcWy72QNTkcNYtZIb927pRx2cRujrlDWsAx7ejWDnRzwo83gIyF8NeTrMv/7wbnHoeA+Gga9AK4Wo9PlCzhuLg==", From 6446226348b074fa7faab315825c56a886eb5200 Mon Sep 17 00:00:00 2001 From: Koy Date: Sun, 12 Sep 2021 20:02:22 +0800 Subject: [PATCH 4/5] Update package-lock.json --- package-lock.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package-lock.json b/package-lock.json index d40f33375..0525f260f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4346,7 +4346,7 @@ } } }, - "@vue/compiler-core": { + "@vue/compiler-core": { "version": "3.2.7", "resolved": "https://registry.npmjs.org/@vue/compiler-core/-/compiler-core-3.2.7.tgz", "integrity": "sha512-OcWy72QNTkcNYtZIb927pRx2cRujrlDWsAx7ejWDnRzwo83gIyF8NeTrMv/7wbnHoeA+Gga9AK4Wo9PlCzhuLg==", From 88ff66fefc6b0f65766a0987de58cf6e959ff1ec Mon Sep 17 00:00:00 2001 From: Koy Date: Sun, 12 Sep 2021 20:04:15 +0800 Subject: [PATCH 5/5] Update package-lock.json --- package-lock.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package-lock.json b/package-lock.json index 0525f260f..8fb5273e1 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4346,7 +4346,7 @@ } } }, - "@vue/compiler-core": { + "@vue/compiler-core": { "version": "3.2.7", "resolved": "https://registry.npmjs.org/@vue/compiler-core/-/compiler-core-3.2.7.tgz", "integrity": "sha512-OcWy72QNTkcNYtZIb927pRx2cRujrlDWsAx7ejWDnRzwo83gIyF8NeTrMv/7wbnHoeA+Gga9AK4Wo9PlCzhuLg==",