[Snyk] Security upgrade sanitize-html from 1.18.4 to 2.3.2

[johnnyporkchops]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	611/1000 Why? Recently disclosed, Has a fix available, CVSS 6.5	Validation Bypass SNYK-JS-SANITIZEHTML-1070780	Yes	No Known Exploit
	611/1000 Why? Recently disclosed, Has a fix available, CVSS 6.5	Access Restriction Bypass SNYK-JS-SANITIZEHTML-1070786	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: sanitize-html

The new version differs by 238 commits.

• fd3cb54 changelog credit
• 6012524 Merge pull request Fixes date #460 from apostrophecms/iframe-validation-redux
• 5395e36 markdown
• bff6d9f Merge pull request Import Record, Press Release and Digest data to CMS #459 from Aspedm/main
• 1ecf30f pass eslint
• 54851d0 new and interesting iframe validation exploits
• dafee4f Update README.md
• b77e1d9 2.3.1
• bdf7836 Merge pull request Scrape Weekly Digest data #458 from apostrophecms/stop-idna-iframe-attacks
• 477b032 Updates README to specify node version (Scrape "FEC Record" pages #457)
• 5804fa9 changelog
• ca4b62a stop IDNA iframe attacks
• 7229906 Fleshes out changelog message
• 5d6c6e6 Updates the version number
• af6e348 Fixes a typo in the changelog
• 251e14a Merge pull request MERGE WITH GITFLOW: Release/public-beta-20160817 #429 from TrySound/upgrade-htmlparser2
• 102c623 Upgrade to v6
• f07bf65 Upgrade htmlparser2
• 6a7b0ca bumps the version number (Apply printer-friendly styles to registration and reporting #446)
• 4be8a61 Adds acknowledgement to changelog. (calendar - list view vs grid view #445)
• d59fdac Merge pull request Calendar should link to today instead of first day of current month #444 from aHerbots/patch-1
• 34f00be Update CHANGELOG.md
• 5ae731e Update README.md
• 07d1523 Allow 'tel' links by default

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic