dompurify version update

[jwkk1]

address known prototype pollution and XSS bypass
vulnerabilities

[aedart]

I too could really use this patch. Also, if its not too demanding, perhaps consider using peerDependencies to allow developers update nested dependencies?
In any case, a patch is really needed in this case. The vulnerabilities keep piling up for projects that "embed" dependencies. It's difficult (or sometimes impossible) to force use up-to-date dependencies that are included in the distributed files.