diff --git a/demo/version-history.json b/demo/version-history.json
index f975bcb..c96bcd2 100644
--- a/demo/version-history.json
+++ b/demo/version-history.json
@@ -597,13 +597,13 @@
"🔧 修复:任务视图切换至资源视图后今日定位偏移问题",
"🔧 修复:任务视图切换至资源视图后最大和最小日期范围计算问题",
"🔧 修复:资源视图下,小时/日/周视图切换后,最大值和最小值范围问题",
- "🔧 修复:包弱点处理",
+ "🔧 修复:包弱点处理,jspdf增加了依赖包dompurify,用于HTML的XSS消毒",
"特别感谢来自jwuxin@gitee的使用与反馈",
"🔧 Fixed: In date view, after dragging the SplitterBar and collapsing/expanding the TaskList, the calculation caused the February cycle to be lost",
"🔧 Fixed: After switching from task view to resource view, the today marker offset issue",
"🔧 Fixed: After switching from task view to resource view, the max and min date range calculation issue",
"🔧 Fixed: In resource view, after switching between hourly/daily/weekly views, the max and min date range issue",
- "🔧 Fixed: Vulnerabilities fixed",
+ "🔧 Fixed: Vulnerabilities fixed, jspdf added dependency dompurify for HTML XSS sanitization",
"Special thanks to jwuxin@gitee for their use and feedback"
]
}
diff --git a/package-lock.json b/package-lock.json
index e6c331c..da31f42 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,6 +10,7 @@
"license": "MIT",
"dependencies": {
"date-fns": "^4.1.0",
+ "dompurify": "^3.3.2",
"html2canvas": "^1.4.1",
"jspdf": "^4.0.0",
"vue": "^3.5.13"
@@ -2531,7 +2532,6 @@
"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.2.tgz",
"integrity": "sha512-6obghkliLdmKa56xdbLOpUZ43pAR6xFy1uOrxBaIDjT+yaRuuybLjGS9eVBoSR/UPU5fq3OXClEHLJNGvbxKpQ==",
"license": "(MPL-2.0 OR Apache-2.0)",
- "optional": true,
"engines": {
"node": ">=20"
},
diff --git a/package.json b/package.json
index 72435ce..3fb9c5c 100644
--- a/package.json
+++ b/package.json
@@ -75,6 +75,7 @@
},
"dependencies": {
"date-fns": "^4.1.0",
+ "dompurify": "^3.3.2",
"html2canvas": "^1.4.1",
"jspdf": "^4.0.0",
"vue": "^3.5.13"