[Snyk] Upgrade dompurify from 3.0.9 to 3.0.10

[scudette]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade dompurify from 3.0.9 to 3.0.10.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 21 days ago, on 2024-03-19.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-FASTXMLPARSER-5777726	185/1000 Why? CVSS 3.7	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: dompurify

• 3.0.10 - 2024-03-19
  
  • Fixed two possible bypasses when sanitizing an XML document and later using it in HTML, thanks @ Slonser
  • Bumped up some build and test dependencies
• 3.0.9 - 2024-02-20
  
  • Fixed a problem with proper detection of Custom Elements, thanks @ kevin-mizu
  • Refactored the hasOwnProperty logic, thanks @ ssi02014
  • Removed a superfluous console.warn making HappyDom happier, thanks @ HugoPoi
  • Modernized some of the demo hooks for better looks, thanks @ Steb95

from dompurify GitHub release notes

Commit messages

Package name: dompurify

• f2b637f Merge pull request Add RDPAuth use case query #917 from cure53/main
• 51eea81 chore: Preparing 3.0.10 release
• dbc1d26 Merge pull request Feature Request: Update SFTP support #915 from cure53/dependabot/npm_and_yarn/follow-redirects-1.15.6
• aaa6da1 build(deps-dev): bump follow-redirects from 1.15.4 to 1.15.6
• fcb9dbd fix: added a fix to handle invalid HTML Custom Element tagNames better
• 1b59639 fix: Fixed a possible issue with XML processing instructions deployed in HTML
• 699b1c9 Merge pull request Typo fixes #913 from cure53/main
• ec1346a Merge pull request Version 0.5.5-1 of the Offline Collector is not deleting files from the designated Temp directory after completing the collection #899 from cure53/main
• aa2c561 Merge pull request Offline collector should have a post collection script. #893 from cure53/main
• db73dd7 Merge pull request Serve the logo in the Welcome screen from webpack #885 from cure53/main
• 1b864e7 Merge pull request hunts() vql function doesn't show creator for hunts created via hunt()  #860 from cure53/main
• c96c9df Merge pull request Artifact plugin should pass bare types. #835 from cure53/main

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}