DOMPurify contains a Cross-site Scripting vulnerability

[mich1991]

Hi! As mentioned in the title Dompurify has vulnerabilities in version 3.3.1. I believe upgrading it to minimum 3.3.2 should fix the issue.

Hopefully it would be a quick fix.

Fix mentioned in DOMPurify release notes.
https://github.com/cure53/DOMPurify/releases/tag/3.3.2

[nlqivision]

Patched in 3.3.2:
GHSA-h8r8-wccr-v5f2

[nlqivision]

Dependabot spotted this in #3970

[nlqivision]

Should be easy fix if #3989 gets accepted.

[github-actions]

This issue is stale because it has been open 90 days with no activity. It will be closed soon. Please comment/reopen if this issue is still relevant.

[kgrabfelder]

This issue is still relevant, is there a way to reopen it?