Merge pull request #50818 from nextcloud/dependabot/npm_and_yarn/dompurify-3.2.4

Author: dependabot[bot]

apps/systemtags/src/components/SystemTagPicker.vue

@@ -128,9 +128,9 @@ import type { Tag, TagWithId } from '../types'
 import { defineComponent } from 'vue'
 import { emit } from '@nextcloud/event-bus'
 import { getLanguage, n, t } from '@nextcloud/l10n'
-import { sanitize } from 'dompurify'
 import { showError, showInfo } from '@nextcloud/dialogs'
 import debounce from 'debounce'
+import domPurify from 'dompurify'
 import escapeHTML from 'escape-html'
 
 import NcButton from '@nextcloud/vue/dist/Components/NcButton.js'
@@ -378,7 +378,7 @@ export default defineComponent({
 				})
 			}
 			const chipHtml = chipCloneEl.outerHTML
-			return chipHtml.replace('%s', escapeHTML(sanitize(tag.displayName)))
+			return chipHtml.replace('%s', escapeHTML(domPurify.sanitize(tag.displayName)))
 		},
 
 		formatTagName(tag: TagWithId): string {

dist/1642-1642.js.license

@@ -74,7 +74,7 @@ This file is generated from multiple sources. Included packages:
 	- version: 2.2.0
 	- license: MIT
 - dompurify
-	- version: 3.1.7
+	- version: 3.2.4
 	- license: (MPL-2.0 OR Apache-2.0)
 - escape-html
 	- version: 1.0.3

dist/2452-2452.js

@@ -65,7 +65,7 @@ This file is generated from multiple sources. Included packages:
 	- version: 7.1.2
 	- license: MIT
 - dompurify
-	- version: 3.1.7
+	- version: 3.2.4
 	- license: (MPL-2.0 OR Apache-2.0)
 - escape-html
 	- version: 1.0.3