mirror of
https://github.com/coder/coder.git
synced 2026-11-12 20:50:29 +08:00
The [DOMPurify](https://github.com/cure53/DOMPurify) version used by the latest version of [monaco-editor](https://github.com/microsoft/monaco-editor) contains [at least one known CVE](https://security.snyk.io/package/npm/dompurify/3.1.7) https://github.com/coder/coder/issues/19445 https://github.com/coder/coder/pull/19446 This PR aims to override the version to resolve security issues: https://www.npmjs.com/package/dompurify/v/3.2.6