fix(deps): update dependency prismjs to v1.25.0 [security] #756
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.23.0
->1.25.0
GitHub Vulnerability Alerts
CVE-2021-32723
Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS).
Impact
When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. Do not use the following languages to highlight untrusted text.
Other languages are not affected and can be used to highlight untrusted text.
Patches
This problem has been fixed in Prism v1.24.
References
CVE-2021-3801
Prism is a syntax highlighting library. The prismjs package is vulnerable to ReDoS (regular expression denial of service). An attacker that is able to provide a crafted HTML comment as input may cause an application to consume an excessive amount of CPU.
Release Notes
PrismJS/prism
v1.25.0
Compare Source
New components
746a4b1a
87e5a376
c1dce998
23cd9b65
4f97b82b
ea776756
e008ea05
a1b67ce3
4fbdd2f8
148c1eca
4433ccfc
8df825e0
6a356d25
Updated components
748bb9ac
with
keyword & improved record support (#2993)fdd291c0
record
,init
, andnullable
keyword (#2991)9b561565
from
keyword (#2970)158f25d4
5de8947f
8d0b74b5
9c8911bd
693b7433
empty
keyword (#2997)fe3bc526
b0365e70
52e8cee9
0ff371bb
∀
a keyword (alias forforall
) (#3005)b38fc89a
679539ec
6f5d68f7
14fdfe32
35b88fcf
4492b62b
8541db2e
@propertyWrapper
,@MainActor
, and@globalActor
(#3009)ce5e0f01
bb93fac0
212e0ef2
Updated plugins
5126d1e1
e289ec60
63edf14c
c7b6a7f6
Updated themes
ffb20439
Other
44456b21
e997dd35
d216e602
247fd9a3
v1.24.1
Compare Source
Updated components
151121cd
Updated plugins
748ecddc
v1.24.0
Compare Source
New components
b0a6ec85
3f7d7453
7e5f78ff
41e25d3c
f9b69528
1f91868e
99a21dc5
bf4e7ba9
e9314415
7e51b99c
3419fb77
2bc6475b
f84c49c5
1a2347a3
18c67b49
1b63cd01
e38986f9
fd1081d2
bbc77d19
72962701
c4f6b2cc
Updated components
regexp/no-dupe-disjunctions
(#2952)f471d2d7
79d22182
d85e30da
ea82478d
fc2a3334
e4ad22ad
e5cfdb4a
::
punctuation (#2814)3df62fd0
88fa72cf
d0bcd074
93dd83c2
114e4626
e6c0d298
defdelagate
keyword and highlighting for function/module names (#2709)59f725d7
a5d7178c
definition-query
anddefinition-mutation
tokens (#2964)bfd7fded
34f24ac9
hbs
alias (#2874)43976351
1dfc8271
6183fd9b
4e7b2a82
42d24fa2
4ec7535c
ab7c9953
415651a0
9c610ae6
022f90a0
abab9104
cf28d1b2
ac1d12f9
45ec4a88
e9477d83
wrap
hook (#2719)2b355c98
8dbbbb35
5943f4cb
87d79390
cf3755cb
fn
keyword (#2858)e0ee93f1
7e8cd40d
8019e2f6
f79b0eef
04ef309c
01af04ed
9f59f52d
30b0444f
inline
pattern (#2946)a7656de6
20b77bff
3786f396
f08c2f7f
0e61a7e1
1c6c0bf3
cda976b1
c83fd0b8
ILIKE
operator (#2704)6e34771f
some
keyword (#2756)cf354ef5
fe98d536
31cc2142
a68f1fb6
REM
is no longer highlighted as a keyword in comments (#2823)ebbbfd47
e32e043b
459365ec
Updated plugins
4b55bd6a
96335642
c81c3319
d5e14e1a
clipboard.writeText
not working inside iFrames (#2826)01b7b6f7
4d7f75b0
2cb909e1
53d34b22
ccc73ab7
classList
instead ofclassName
(#2787)d298d46e
Other
tabindex
to code blocks to enable keyboard navigation (#2799)dbf70515
b37987d3
970674cf
npm-run-all
to clean up test command (#2938)5d3d8088
7cd9e794
b77317c5
45b0e82a
0feb266f
ad9878ad
--language
for patterns tests (#2929)a62ef796
8dbf1217
a9a199b6
4492c5ce
53151404
5bc405e7
99f3ddcd
--insert
and--update
parameters to language test (#2809)4c8b855d
components.json
tests (#2758)933af805
7a790bf9
npm ci
(#2899)91f3aaed
cb220168
266cc700
my.cdn
in code sample with Handlebars-like placeholder (#2906)80471181
38f1d289
9b784ebf
a1209930
ec9767d6
1506f345
Configuration
📅 Schedule: Branch creation - "" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.