Fixes RSS parsing and hardens security against XSS

[lissy93]

Category:
Fix

Overview

Briefly outline your new changes...

Issue Number

• Fixes user-reported XSS risk
• Fixes [BUG] RSS feed not working when parsing locally #1956
• Fixes [BUG] RSS Feed Widget - Uncaught (in promise) TypeError: can't access property "title", t[n] is undefined #1896

New Vars N/A

Screenshot N/A

Code Quality Checklist (Please complete)

• All changes are backwards compatible
• All lint checks and tests are passing
• There are no (new) build warnings or errors
• [] (If a new config option is added) Attribute is outlined in the schema and documented
• (If a new dependency is added) Package is essential, and has been checked out for security or performance
• [] (If significant change) Bumps version in package.json

[netlify]

✅ Deploy Preview for dashy-dev ready!

Name	Link
🔨 Latest commit	f467b2e
🔍 Latest deploy log	https://app.netlify.com/projects/dashy-dev/deploys/699206a9f292ae0008f827e4
😎 Deploy Preview	https://deploy-preview-1993--dashy-dev.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[liss-bot]

yarn.lock changes

Click to toggle table visibility

Name	Status	Previous	Current
@types/trusted-types		-	2.0.7
dompurify		-	3.3.1

[supercoolspy]

Should there also be a security report for this issue?