From fca6c622452b9c7d92038635062e5a4139ec0f39 Mon Sep 17 00:00:00 2001
From: wangsongc <wangsongc@foxmail.com>
Date: Fri, 18 Feb 2022 10:01:45 +0800
Subject: [PATCH] chore: upgrade xss version (#774)

* chore: upgrade xss version

* ci: change npm to yarn
---
 .github/workflows/gha.yml |  6 +++---
 package.json              |  2 +-
 yarn.lock                 | 12 ++++++------
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/gha.yml b/.github/workflows/gha.yml
index 46fb7a303..148fb4358 100644
--- a/.github/workflows/gha.yml
+++ b/.github/workflows/gha.yml
@@ -12,10 +12,10 @@ jobs:
       - uses: actions/checkout@v2
       - name: install dependence
         run: |
-          npm i
+          yarn
       - name: run eslint
         run: |
-          npm run lint
+          yarn lint
       - name: run test
         run: |
-          npm run test
+          yarn test
diff --git a/package.json b/package.json
index c2c8dcc0e..0c7ebee56 100644
--- a/package.json
+++ b/package.json
@@ -36,7 +36,7 @@
   },
   "homepage": "https://github.com/hinesboy/mavonEditor#readme",
   "dependencies": {
-    "xss": "^1.0.6"
+    "xss": "^1.0.10"
   },
   "devDependencies": {
     "@vue/test-utils": "^1.1.2",
diff --git a/yarn.lock b/yarn.lock
index b3b9700ed..cdb978817 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1901,7 +1901,7 @@ commander@2.17.x:
   resolved "https://registry.yarnpkg.com/commander/-/commander-2.17.1.tgz#bd77ab7de6de94205ceacc72f1716d29f20a77bf"
   integrity sha512-wPMUt6FnH2yzG95SA6mzjQOEKUU3aLaDEmzs1ti+1E9h+CsrZghRlqEM/EJ4KscsQVG8uNN4uVreUeT8+drlgg==
 
-commander@^2.18.0, commander@^2.19.0, commander@^2.9.0:
+commander@^2.18.0, commander@^2.19.0, commander@^2.20.3:
   version "2.20.3"
   resolved "https://registry.yarnpkg.com/commander/-/commander-2.20.3.tgz#fd485e84c03eb4881c20722ba48035e8531aeb33"
   integrity sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==
@@ -9266,12 +9266,12 @@ xml-name-validator@^3.0.0:
   resolved "https://registry.yarnpkg.com/xml-name-validator/-/xml-name-validator-3.0.0.tgz#6ae73e06de4d8c6e47f9fb181f78d648ad457c6a"
   integrity sha512-A5CUptxDsvxKJEU3yO6DuWBSJz/qizqzJKOMIfUJHETbBw/sFaDxgd6fxm1ewUaM0jZ444Fc5vC5ROYurg/4Pw==
 
-xss@^1.0.6:
-  version "1.0.6"
-  resolved "https://registry.yarnpkg.com/xss/-/xss-1.0.6.tgz#eaf11e9fc476e3ae289944a1009efddd8a124b51"
-  integrity sha512-6Q9TPBeNyoTRxgZFk5Ggaepk/4vUOYdOsIUYvLehcsIZTFjaavbVnsuAkLA5lIFuug5hw8zxcB9tm01gsjph2A==
+xss@1.0.10:
+  version "1.0.10"
+  resolved "https://registry.yarnpkg.com/xss/-/xss-1.0.10.tgz#5cd63a9b147a755a14cb0455c7db8866120eb4d2"
+  integrity sha512-qmoqrRksmzqSKvgqzN0055UFWY7OKx1/9JWeRswwEVX9fCG5jcYRxa/A2DHcmZX6VJvjzHRQ2STeeVcQkrmLSw==
   dependencies:
-    commander "^2.9.0"
+    commander "^2.20.3"
     cssfilter "0.0.10"
 
 xtend@^4.0.0, xtend@~4.0.1: