jcoffey-dev
6303d653aa
DOMPurify 3.4.13-3.4.15 can leave event handlers armed on a detached subtree when IN_PLACE sanitizing is combined with a node-removing afterSanitize hook (GHSA-p98j-92pf-mc4p, low). The message sanitizer uses neither (only an afterSanitizeAttributes hook), so it isn't believed affected, but the fix is a patch release. Typecheck, tests and build pass.
35 lines
888 B
JSON
35 lines
888 B
JSON
{
|
|
"name": "@ihasmail/web",
|
|
"version": "0.0.0",
|
|
"private": true,
|
|
"license": "AGPL-3.0-or-later",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "tsc -p tsconfig.json --noEmit && vite build && node ../scripts/precompress.mjs dist",
|
|
"preview": "vite preview",
|
|
"typecheck": "tsc -p tsconfig.json --noEmit",
|
|
"test": "vitest run"
|
|
},
|
|
"dependencies": {
|
|
"@tanstack/react-virtual": "^3.14.12",
|
|
"dompurify": "^3.4.16",
|
|
"lucide-react": "^1.45.0",
|
|
"marked": "^18.0.11",
|
|
"qrcode-generator": "^2.0.4",
|
|
"react": "^19.0.0",
|
|
"react-dom": "^19.0.0",
|
|
"wouter": "^3.11.0",
|
|
"zustand": "^5.0.3"
|
|
},
|
|
"devDependencies": {
|
|
"@types/react": "^19.0.10",
|
|
"@types/react-dom": "^19.2.7",
|
|
"@vitejs/plugin-react": "^6.1.1",
|
|
"jsdom": "^30.0.1",
|
|
"typescript": "^7.0.2",
|
|
"vite": "^8.3.0",
|
|
"vitest": "^5.0.0"
|
|
}
|
|
}
|