open-legal-products/mike#313: fix(frontend): bump dompurify to 3.4.13 to fix GHSA-55q2-fjhq-7xh7

fix(frontend): bump dompurify to 3.4.13 to fix GHSA-55q2-fjhq-7xh7

🟢 open · #313 · open-legal-products/mike ← jasergu/mike · opened 27d ago by jasergu · +19-19 across 3 files · ↗ on GitHub

From the PR description

Summary

Bumps dompurify from ^3.4.8 to ^3.4.13 in the frontend to pick up the fix for GHSA-55q2-fjhq-7xh7 (moderate severity): IN_PLACE hook removal leaves a detached subtree executable, causing XSS. All versions <=3.4.12 are affected; the fix landed in 3.4.13.

Changes

frontend/package.json: dompurify ^3.4.8 → ^3.4.13
frontend/package-lock.json: regenerated accordingly

No code changes required - this is a drop-in patch update.

Verification

npm audit no longer reports the dompurify advisory after the bump.

🤖 Generated with Claude Code

Capture this PR into my fork

Download a Markdown prompt that tells Claude how to port every commit in this PR into your working tree. Run it via claude -p < capture-pull-313.md from inside the repo you want the changes in.

⬇ Download capture-pull-313.md