From 0b6f353b99d1e1f05707a82aee381c242aeb6522 Mon Sep 17 00:00:00 2001
From: Jakub Domeracki <jakub@coder.com>
Date: Wed, 27 Aug 2025 19:55:57 +0200
Subject: [PATCH] chore: override version of DOMPurify (#19574)

The [DOMPurify](https://github.com/cure53/DOMPurify) version used by the
latest version of
[monaco-editor](https://github.com/microsoft/monaco-editor) contains [at
least one known
CVE](https://security.snyk.io/package/npm/dompurify/3.1.7)
https://github.com/coder/coder/issues/19445
https://github.com/coder/coder/pull/19446

This PR aims to override the version to resolve security issues:
https://www.npmjs.com/package/dompurify/v/3.2.6
---
 site/package.json   | 3 ++-
 site/pnpm-lock.yaml | 1 +
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/site/package.json b/site/package.json
index 5693fc5d55..95788ef97d 100644
--- a/site/package.json
+++ b/site/package.json
@@ -204,7 +204,8 @@
 			"@babel/helpers": "7.26.10",
 			"esbuild": "^0.25.0",
 			"form-data": "4.0.4",
-			"prismjs": "1.30.0"
+			"prismjs": "1.30.0",
+			"dompurify": "3.2.6"
 		},
 		"ignoredBuiltDependencies": [
 			"storybook-addon-remix-react-router"
diff --git a/site/pnpm-lock.yaml b/site/pnpm-lock.yaml
index 31a8857901..2351ad4c51 100644
--- a/site/pnpm-lock.yaml
+++ b/site/pnpm-lock.yaml
@@ -12,6 +12,7 @@ overrides:
   esbuild: ^0.25.0
   form-data: 4.0.4
   prismjs: 1.30.0
+  dompurify: 3.2.6
 
 importers: