fix(deps): update dependency dompurify to v2.0.17 [security] - abandoned

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
dompurify	2.0.8 -> 2.0.17

GitHub Vulnerability Alerts

CVE-2020-26870

Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.

---

Release Notes

cure53/DOMPurify

v2.0.17: DOMPurify 2.0.17

Compare Source

• Fixed another bypass causing mXSS by using MathML

v2.0.16: DOMPurify 2.0.16

Compare Source

• Fixed an mXSS-based bypass caused by nested forms inside MathML
• Fixed a security error thrown on older Chrome on Android versions, see #​470

Credits for the bypass go to Michał Bentkowski (@​securityMB) of Securitum who spotted the bug in Chrome, turned it into another DOMPurify bypass, reported and helped verifying the fix 🙇‍♂️ 🙇‍♀️

v2.0.15: DOMPurify 2.0.15

Compare Source

• Added a renovated test suite, thanks @​peernohell
• Fixed some minor linter warnings

v2.0.14: DOMPurify 2.0.14

Compare Source

• Fixed a problem with the documentMode default value

v2.0.13

Compare Source

v2.0.12: DOMPurify 2.0.12

Compare Source

• Fixed a minor bug when working with Trusted Types
• Fixed some typos in a demo file
• Fixed some wordings in code and docs

v2.0.11: DOMPurify 2.0.11

Compare Source

• Fixed faulty behavior for non breaking space characters
• Added ADD_DATA_URI_TAGS directive to allow customizing Data URI tag behavior

v2.0.10: DOMPurify 2.0.10

Compare Source

• Fixed a dependency problem causing builds to break
• Fixed a test in Chrome 83 covering Trusted Types

v2.0.9: DOMPurify 2.0.9

Compare Source

• Removed a meanwhile useless parser check
• Added countless new attributes to whitelist
• Added whole new build and system
• Added license tag to compressed files
• Updated README for more clarity

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

[renovate]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.