diff --git a/demo/version-history.json b/demo/version-history.json index f975bcb..c96bcd2 100644 --- a/demo/version-history.json +++ b/demo/version-history.json @@ -597,13 +597,13 @@ "🔧 修复:任务视图切换至资源视图后今日定位偏移问题", "🔧 修复:任务视图切换至资源视图后最大和最小日期范围计算问题", "🔧 修复:资源视图下,小时/日/周视图切换后,最大值和最小值范围问题", - "🔧 修复:包弱点处理", + "🔧 修复:包弱点处理,jspdf增加了依赖包dompurify,用于HTML的XSS消毒", "特别感谢来自jwuxin@gitee的使用与反馈", "🔧 Fixed: In date view, after dragging the SplitterBar and collapsing/expanding the TaskList, the calculation caused the February cycle to be lost", "🔧 Fixed: After switching from task view to resource view, the today marker offset issue", "🔧 Fixed: After switching from task view to resource view, the max and min date range calculation issue", "🔧 Fixed: In resource view, after switching between hourly/daily/weekly views, the max and min date range issue", - "🔧 Fixed: Vulnerabilities fixed", + "🔧 Fixed: Vulnerabilities fixed, jspdf added dependency dompurify for HTML XSS sanitization", "Special thanks to jwuxin@gitee for their use and feedback" ] } diff --git a/package-lock.json b/package-lock.json index e6c331c..da31f42 100644 --- a/package-lock.json +++ b/package-lock.json @@ -10,6 +10,7 @@ "license": "MIT", "dependencies": { "date-fns": "^4.1.0", + "dompurify": "^3.3.2", "html2canvas": "^1.4.1", "jspdf": "^4.0.0", "vue": "^3.5.13" @@ -2531,7 +2532,6 @@ "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.2.tgz", "integrity": "sha512-6obghkliLdmKa56xdbLOpUZ43pAR6xFy1uOrxBaIDjT+yaRuuybLjGS9eVBoSR/UPU5fq3OXClEHLJNGvbxKpQ==", "license": "(MPL-2.0 OR Apache-2.0)", - "optional": true, "engines": { "node": ">=20" }, diff --git a/package.json b/package.json index 72435ce..3fb9c5c 100644 --- a/package.json +++ b/package.json @@ -75,6 +75,7 @@ }, "dependencies": { "date-fns": "^4.1.0", + "dompurify": "^3.3.2", "html2canvas": "^1.4.1", "jspdf": "^4.0.0", "vue": "^3.5.13"