@daoyi/nmtl-ui 2.0.1-beta.135 → 2.0.1-beta.137

package/lib/components/Breadcrumbs.js

@@ -69,48 +69,61 @@ var Breadcrumbs = function Breadcrumbs(_ref) {
     var icon = _ref2.icon,
       text = _ref2.text,
       href = _ref2.href,
-      onClick = _ref2.onClick;
+      _onClick = _ref2.onClick;
     var lastLink = i === links.length - 1;
 
-    /* 尾巴＝目前所在頁：aria-current="page" 標在這裡（WCAG 4.1.2，數位部人工檢測 GN1410200E，2026-10-07） */
+    /* 尾巴＝目前所在頁：aria-current="page" 標在這裡（WCAG 4.1.2，數位部人工檢測 GN1410200E，2026-10-07）。
+       目前頁不是互動元件：不掛 onClick（原本滑鼠點得到、鍵盤卻聚焦不到，2026-10-08 人工測試回饋） */
     if (lastLink) return /*#__PURE__*/React__default.createElement(BreadcrumbItem, {
       key: i.toString(),
       lastItem: true,
       current: true,
       icon: icon,
-      text: text,
-      onClick: onClick
+      text: text
     });
 
-    /* 頭、中間用 Link 而不是 NavLink：NavLink 沒加 exact 時，「首頁」的 /zh-tw/ 是所有網址的開頭，
+    /* 頭、中間有網址：用 Link 而不是 NavLink。NavLink 沒加 exact 時，「首頁」的 /zh-tw/ 是所有網址的開頭，
        會被自動標成 aria-current="page"＋active，讀屏誤報首頁為目前頁（GN1410200E） */
-    if (i === 0) {
+    if (href || i === 0 && !_onClick) {
       return /*#__PURE__*/React__default.createElement(Link, {
         className: "breadcrumbs__link",
         key: i.toString(),
         to: href || '/',
-        onClick: onClick
+        onClick: _onClick
       }, /*#__PURE__*/React__default.createElement(BreadcrumbItem, {
         icon: icon,
         text: text
       }));
     }
 
-    /* 中間 */
-    return href ? /*#__PURE__*/React__default.createElement(Link, {
-      className: "breadcrumbs__link",
-      key: i.toString(),
-      to: href,
-      onClick: onClick
-    }, /*#__PURE__*/React__default.createElement(BreadcrumbItem, {
-      icon: icon,
-      text: text
-    })) : /*#__PURE__*/React__default.createElement(BreadcrumbItem, {
+    /* 只有 onClick（程式導頁）：原本渲染成純文字，滑鼠點得到但鍵盤無法聚焦（WCAG 2.1.1，2026-10-08 人工測試回饋）。
+       作用是前往其他頁，語意是連結 → <a href="#">，可 Tab 聚焦、Enter 啟動，焦點框沿用各站 :focus-visible */
+    if (_onClick) {
+      return (
+        /*#__PURE__*/
+        /* 點下去確實會換頁（由呼叫端的 onClick 導頁），不是按鈕 */
+        // eslint-disable-next-line jsx-a11y/anchor-is-valid
+        React__default.createElement("a", {
+          className: "breadcrumbs__link",
+          key: i.toString(),
+          href: "#",
+          onClick: function onClick(e) {
+            e.preventDefault();
+            _onClick(e);
+          }
+        }, /*#__PURE__*/React__default.createElement(BreadcrumbItem, {
+          icon: icon,
+          text: text
+        }))
+      );
+    }
+
+    /* 中間沒有網址也沒有動作：純文字 */
+    return /*#__PURE__*/React__default.createElement(BreadcrumbItem, {
       key: i.toString(),
       lastItem: true,
       icon: icon,
-      text: text,
-      onClick: onClick
+      text: text
     });
   }));
 };

package/lib/components/CollapseContent.js

@@ -50,8 +50,17 @@ const addNewWindowHint = function (html) {
 };
 
 const HtmlToReactParser = require('html-to-react').Parser;
+const DOMPurify = require('dompurify');
 const htmlToReactParser = new HtmlToReactParser();
 
+/* 後台文稿以 markdown-it（html: true）轉換，原始 HTML 會直接放行；轉成 React 之前必須先消毒，
+   擋掉 <script>、onerror、javascript: 等 XSS 向量（內容雖來自後台，仍做縱深防禦；比照主站 nmtl-web htmlEntities.js）。
+   用獨立實例：@daoyi/timeline 在全域 DOMPurify 掛了 hook，會把所有沒寫 target 的連結強制改成另開新視窗 */
+const purify = DOMPurify(typeof window !== 'undefined' ? window : undefined);
+const sanitize = html => purify.isSupported ? purify.sanitize(html, {
+  ADD_ATTR: ['target']
+}) : html;
+
 // full options list (defaults)
 const md = require('markdown-it')({
   html: true,
@@ -88,8 +97,8 @@ const md = require('markdown-it')({
 // eslint-disable-next-line import/prefer-default-export
 const convert2HtmlEntities = text => {
   if (text === undefined) return '';
-  /* 後台文稿裡 target="_blank" 的連結，連結文字補「（另開新視窗）」（HM1240404E，2026-10-07） */
-  return htmlToReactParser.parse(addNewWindowHint(md.render(text)));
+  /* 先消毒，再替 target="_blank" 的連結文字補「（另開新視窗）」（HM1240404E，2026-10-07） */
+  return htmlToReactParser.parse(addNewWindowHint(sanitize(md.render(text))));
 };
 
 /* eslint-disable react/no-danger */

package/lib/components/{ContactModal-19979528.js → ContactModal-af7fa280.js}

@@ -8,7 +8,7 @@ import '@material-ui/styles';
 import { u as useTheme } from './useTheme-98b6cf17.js';
 import './withTheme-3486f38b.js';
 import axios from 'axios';
-import { M as Modal } from './Modal-b984f381.js';
+import { M as Modal } from './Modal-aa77d4d8.js';
 import { c as commonjsGlobal, a as getDefaultExportFromCjs } from './_commonjsHelpers-70de2c37.js';
 import { c as classNames } from './index-c33afcb5.js';
 import { Input, IconButton, Button, Box, Typography, FormControl, RadioGroup, FormControlLabel, Radio, TextField, TextareaAutosize } from '@material-ui/core';

package/lib/components/ContactModal.js

@@ -1,4 +1,4 @@
-export { C as default } from './ContactModal-19979528.js';
+export { C as default } from './ContactModal-af7fa280.js';
 import './_rollupPluginBabelHelpers-a52356f6.js';
 import 'react';
 import 'prop-types';
@@ -9,7 +9,7 @@ import '@material-ui/styles';
 import './useTheme-98b6cf17.js';
 import './withTheme-3486f38b.js';
 import 'axios';
-import './Modal-b984f381.js';
+import './Modal-aa77d4d8.js';
 import './index-c33afcb5.js';
 import '@material-ui/core';
 import '@material-ui/icons';

package/lib/components/Footer.js

@@ -3,7 +3,7 @@ import React__default, { useState, useEffect } from 'react';
 import { c as classNames } from './index-c33afcb5.js';
 import PropTypes from 'prop-types';
 import axios from 'axios';
-import { C as ContactModal } from './ContactModal-19979528.js';
+import { C as ContactModal } from './ContactModal-af7fa280.js';
 import { S as Spin } from './Spin-07679812.js';
 import { getIntl } from './globalConfig';
 import { s as styleInject } from './style-inject.es-1f59c1d0.js';
@@ -13,7 +13,7 @@ import './defaultTheme-c5dd0f64.js';
 import '@material-ui/styles';
 import './useTheme-98b6cf17.js';
 import './withTheme-3486f38b.js';
-import './Modal-b984f381.js';
+import './Modal-aa77d4d8.js';
 import '@material-ui/core';
 import '@material-ui/icons';
 import './Button-8cf35bc0.js';

package/lib/components/Header.js

@@ -3,7 +3,7 @@ import React__default, { useState, useRef, useEffect } from 'react';
 import PropTypes from 'prop-types';
 import { c as classNames } from './index-c33afcb5.js';
 import { d as debounce_1 } from './debounce-127da66c.js';
-import { useHistory, useRouteMatch, NavLink } from 'react-router-dom';
+import { useHistory, useRouteMatch, useLocation, NavLink } from 'react-router-dom';
 import { Typography, IconButton } from '@material-ui/core';
 import { SearchOutlined } from '@material-ui/icons';
 import { K as KeywordSearch } from './KeywordSearch-4e621ded.js';
@@ -33,6 +33,7 @@ styleInject(css_248z);
 var showDarkModeSwitch = false;
 var Header = function Header(props) {
   var title = props.title,
+    siteName = props.siteName,
     logo = props.logo,
     locale = props.locale,
     supportLanguages = props.supportLanguages,
@@ -53,6 +54,33 @@ var Header = function Header(props) {
   var search = history.location.search;
   var _useRouteMatch = useRouteMatch(),
     url = _useRouteMatch.url;
+  var _useLocation = useLocation(),
+    pathname = _useLocation.pathname;
+
+  /* 首頁的 logo 不該念「回首頁」（2026-10-08 人工測試回饋）：在首頁時念「{站名}，目前在首頁」並標 aria-current，
+     其他頁念「{站名}，回首頁」。站名優先用 siteName（只供報讀、依語系），沒有才用畫面上的 title。
+     首頁：主站 /{locale}/main/home、子站 /{locale}/home，也含 / 與 /{locale} */
+  var isHome = new RegExp("^(/".concat(locale, ")?(/main)?(/home)?/?$")).test(pathname);
+  var logoName = siteName || title;
+  var intl = getIntl();
+  var logoLabel;
+  if (isHome) {
+    logoLabel = logoName ? intl.formatMessage({
+      id: 'aria.header.logoCurrentHomeWithTitle'
+    }, {
+      title: logoName
+    }) : intl.formatMessage({
+      id: 'aria.header.logoCurrentHome'
+    });
+  } else {
+    logoLabel = logoName ? intl.formatMessage({
+      id: 'aria.header.logoHomeWithTitle'
+    }, {
+      title: logoName
+    }) : intl.formatMessage({
+      id: 'aria.header.logoHome'
+    });
+  }
   // const { keyword } = queryString.parse(search);
   var _useState = useState(false),
     _useState2 = _slicedToArray(_useState, 2),
@@ -86,13 +114,11 @@ var Header = function Header(props) {
   }, /*#__PURE__*/React__default.createElement(NavLink, {
     to: "/".concat(locale, "/main/home"),
     className: "header__logo",
-    "aria-label": title ? getIntl().formatMessage({
-      id: 'aria.header.logoHomeWithTitle'
-    }, {
-      title: title
-    }) : getIntl().formatMessage({
-      id: 'aria.header.logoHome'
-    })
+    "aria-label": logoLabel
+    /* aria-current 由是否在首頁決定（子站首頁不是 /main/home，不能靠 NavLink 自動比對） */,
+    isActive: function isActive() {
+      return isHome;
+    }
   }, logo && /*#__PURE__*/React__default.createElement("div", {
     className: "header__logo__img"
   }, logo), !menuOpen && title && /*#__PURE__*/React__default.createElement(Typography, {
@@ -182,6 +208,7 @@ var Header = function Header(props) {
 Header.defaultProps = {
   className: undefined,
   title: undefined,
+  siteName: undefined,
   logo: undefined,
   locale: undefined,
   supportLanguages: defaultSupportLanguage,
@@ -202,6 +229,8 @@ Header.propTypes = {
   className: PropTypes.string,
   /** 標題(通常為網站名稱) */
   title: PropTypes.string,
+  /** 站名，只用於 logo 連結的可及名稱（依語系；不顯示在畫面上）。未提供時用 title */
+  siteName: PropTypes.string,
   /** 網站Logo */
   logo: PropTypes.node,
   /** 語系 */

package/lib/components/Keywords.js

@@ -2,7 +2,7 @@ import { a as _slicedToArray } from './_rollupPluginBabelHelpers-a52356f6.js';
 import React__default, { useState, useEffect, useRef } from 'react';
 import PropTypes from 'prop-types';
 import { c as classNames } from './index-c33afcb5.js';
-import { M as Modal } from './Modal-b984f381.js';
+import { M as Modal } from './Modal-aa77d4d8.js';
 import { Typography } from '@material-ui/core';
 import { r as requireCreateSvgIcon, i as interopRequireDefault, a as interopRequireWildcard } from './createSvgIcon-370e163a.js';
 import { getIntl } from './globalConfig';

package/lib/components/{Modal-b984f381.js → Modal-aa77d4d8.js}

@@ -13,6 +13,28 @@ styleInject(css_248z);
 
 /* 每個 Modal 實例需要唯一 id，才能把標題和 role="dialog" 綁起來 */
 var modalSeq = 0;
+
+/* WCAG 2.4.3 對話框關閉後，焦點要回到開啟它的按鈕。MUI Dialog 會還給「開啟當下」的那個 DOM 元素，
+   但開啟期間若頁面資料才回來、版面重排，觸發按鈕會被換成新的元素（例：主站版本頁「我要補充資料」
+   依有無書影放在不同位置），舊元素已不在頁面上，焦點就掉回 body。
+   因此開啟時記下觸發元素的特徵，關閉後若舊元素已脫離頁面，找特徵相同且看得到的元素補還焦點。 */
+var describeTrigger = function describeTrigger(el) {
+  if (!el || el === document.body || el === document.documentElement) return null;
+  return {
+    el: el,
+    tag: el.tagName,
+    label: el.getAttribute('aria-label'),
+    text: (el.textContent || '').trim()
+  };
+};
+var findTrigger = function findTrigger(trigger) {
+  if (!trigger) return null;
+  if (trigger.el.isConnected) return trigger.el;
+  var candidates = Array.from(document.getElementsByTagName(trigger.tag));
+  return candidates.find(function (el) {
+    return el.offsetParent !== null && el.getAttribute('aria-label') === trigger.label && (el.textContent || '').trim() === trigger.text;
+  }) || null;
+};
 var Modal = function Modal(props) {
   var className = props.className,
     title = props.title,
@@ -40,6 +62,25 @@ var Modal = function Modal(props) {
     titleIdRef.current = "nmtl-modal-".concat(modalSeq, "-title");
   }
   var titleId = titleIdRef.current;
+
+  /* 在 render 階段（MUI 把焦點移進對話框之前）記下觸發元素 */
+  var triggerRef = useRef(null);
+  var wasVisibleRef = useRef(false);
+  if (visible && !wasVisibleRef.current && typeof document !== 'undefined') {
+    triggerRef.current = describeTrigger(document.activeElement);
+  }
+  wasVisibleRef.current = Boolean(visible);
+
+  /* onExited 觸發時對話框還沒卸載、焦點仍在對話框內；等下一輪卸載後再判斷焦點是否掉回 body */
+  var restoreFocus = function restoreFocus() {
+    setTimeout(function () {
+      var active = document.activeElement;
+      /* MUI 已成功還原（焦點不在 body）就不動 */
+      if (active && active !== document.body) return;
+      var target = findTrigger(triggerRef.current);
+      if (target) target.focus();
+    }, 0);
+  };
   return /*#__PURE__*/React__default.createElement(Dialog, {
     className: classNames('modal', {
       'modal--transparent': transparent
@@ -49,7 +90,10 @@ var Modal = function Modal(props) {
     onClose: function onClose() {
       return closable && onCancel();
     },
-    "aria-labelledby": title ? titleId : undefined
+    "aria-labelledby": title ? titleId : undefined,
+    TransitionProps: {
+      onExited: restoreFocus
+    }
   }, /*#__PURE__*/React__default.createElement(DialogTitle, {
     className: "modal__title"
   }, /*#__PURE__*/React__default.createElement("span", {

package/lib/components/Modal.js

@@ -1,4 +1,4 @@
-export { M as default } from './Modal-b984f381.js';
+export { M as default } from './Modal-aa77d4d8.js';
 import 'react';
 import './index-c33afcb5.js';
 import 'prop-types';

package/lib/components/globalConfig.js

@@ -64,6 +64,8 @@ var zhtw = {
 	"aria.header.menuClose": "關閉主選單",
 	"header.language": "語言",
 	"aria.breadcrumbs": "麵包屑",
+	"aria.header.logoCurrentHome": "目前在首頁",
+	"aria.header.logoCurrentHomeWithTitle": "{title}，目前在首頁",
 	"aria.header.logoHome": "回首頁",
 	"aria.header.logoHomeWithTitle": "{title}，回首頁",
 	"aria.header.navigation": "主選單",
@@ -71,8 +73,8 @@ var zhtw = {
 	"aria.autocomplete.search": "執行搜尋",
 	"aria.loading": "載入中",
 	"aria.modal.close": "關閉視窗",
-	"chronology.videoThumbnail": "{title}影片截圖",
-	"chronology.watchVideo": "觀看影片",
+	"chronology.driveImage": "{title}相關圖片",
+	"chronology.openDriveFile": "在 Google 雲端硬碟檢視原始檔案",
 	"aria.newWindow": "（另開新視窗）",
 	"aria.vcode.image": "驗證碼圖片，如無法辨識可刷新驗證碼",
 	"aria.vcode.refresh": "刷新驗證碼",
@@ -196,6 +198,8 @@ var zhcn = {
 	"aria.header.menuClose": "关闭主选单",
 	"header.language": "语言",
 	"aria.breadcrumbs": "面包屑",
+	"aria.header.logoCurrentHome": "目前在首页",
+	"aria.header.logoCurrentHomeWithTitle": "{title}，目前在首页",
 	"aria.header.logoHome": "回首页",
 	"aria.header.logoHomeWithTitle": "{title}，回首页",
 	"aria.header.navigation": "主选单",
@@ -203,8 +207,8 @@ var zhcn = {
 	"aria.autocomplete.search": "执行搜寻",
 	"aria.loading": "载入中",
 	"aria.modal.close": "关闭视窗",
-	"chronology.videoThumbnail": "{title}影片截图",
-	"chronology.watchVideo": "观看影片",
+	"chronology.driveImage": "{title}相关图片",
+	"chronology.openDriveFile": "在 Google 云端硬盘查看原始文件",
 	"aria.newWindow": "（另开新视窗）",
 	"aria.vcode.image": "验证码图片，如无法辨识可刷新验证码",
 	"aria.vcode.refresh": "刷新验证码",
@@ -330,6 +334,8 @@ var enus = {
 	"aria.header.menuClose": "Close main menu",
 	"header.language": "Language",
 	"aria.breadcrumbs": "Breadcrumb",
+	"aria.header.logoCurrentHome": "You are on the home page",
+	"aria.header.logoCurrentHomeWithTitle": "{title}, you are on the home page",
 	"aria.header.logoHome": "Back to home",
 	"aria.header.logoHomeWithTitle": "{title}, back to home",
 	"aria.header.navigation": "Main menu",
@@ -337,8 +343,8 @@ var enus = {
 	"aria.autocomplete.search": "Search",
 	"aria.loading": "Loading",
 	"aria.modal.close": "Close dialog",
-	"chronology.videoThumbnail": "Screenshot of the video: {title}",
-	"chronology.watchVideo": "Watch the video",
+	"chronology.driveImage": "Image related to {title}",
+	"chronology.openDriveFile": "View the original file on Google Drive",
 	"aria.newWindow": " (opens in new window)",
 	"aria.vcode.image": "CAPTCHA image, refresh if unreadable",
 	"aria.vcode.refresh": "Refresh CAPTCHA",

package/lib/utils/convert2HtmlEntities.js

@@ -2,8 +2,19 @@ import { a as addNewWindowHint } from './newWindowHint-db113a69.js';
 import '../components/globalConfig';
 
 var HtmlToReactParser = require('html-to-react').Parser;
+var DOMPurify = require('dompurify');
 var htmlToReactParser = new HtmlToReactParser();
 
+/* 後台文稿以 markdown-it（html: true）轉換，原始 HTML 會直接放行；轉成 React 之前必須先消毒，
+   擋掉 <script>、onerror、javascript: 等 XSS 向量（內容雖來自後台，仍做縱深防禦；比照主站 nmtl-web htmlEntities.js）。
+   用獨立實例：@daoyi/timeline 在全域 DOMPurify 掛了 hook，會把所有沒寫 target 的連結強制改成另開新視窗 */
+var purify = DOMPurify(typeof window !== 'undefined' ? window : undefined);
+var sanitize = function sanitize(html) {
+  return purify.isSupported ? purify.sanitize(html, {
+    ADD_ATTR: ['target']
+  }) : html;
+};
+
 // full options list (defaults)
 var md = require('markdown-it')({
   html: true,
@@ -39,8 +50,8 @@ var md = require('markdown-it')({
 // eslint-disable-next-line import/prefer-default-export
 var convert2HtmlEntities = function convert2HtmlEntities(text) {
   if (text === undefined) return '';
-  /* 後台文稿裡 target="_blank" 的連結，連結文字補「（另開新視窗）」（HM1240404E，2026-10-07） */
-  return htmlToReactParser.parse(addNewWindowHint(md.render(text)));
+  /* 先消毒，再替 target="_blank" 的連結文字補「（另開新視窗）」（HM1240404E，2026-10-07） */
+  return htmlToReactParser.parse(addNewWindowHint(sanitize(md.render(text))));
 };
 
 export { convert2HtmlEntities as default };

package/lib/utils/prepareTimelineData.js

@@ -33,22 +33,24 @@ var prepareMedia = function prepareMedia(media, headline) {
     id = _match[1];
   var _getIntl = getIntl(),
     formatMessage = _getIntl.formatMessage;
-  var alt = formatMessage({
-    id: 'chronology.videoThumbnail'
+  /* 雲端硬碟的檔案多半是圖片、少數是影片，無法從網址判斷 → 用詞不限定影片（2026-10-08 人工測試回饋）。
+     縮圖就是檔案內容本身：alt 優先用圖說（通常是圖片的說明與來源），沒有圖說才用「{標題}相關圖片」 */
+  var alt = stripTags(media.caption) || formatMessage({
+    id: 'chronology.driveImage'
   }, {
     title: stripTags(headline)
   });
-  var watch = "<a href=\"".concat(driveView(id), "\" target=\"_blank\" rel=\"noopener noreferrer\">").concat(formatMessage({
-    id: 'chronology.watchVideo'
+  var open = "<a href=\"".concat(driveView(id), "\" target=\"_blank\" rel=\"noopener noreferrer\">").concat(formatMessage({
+    id: 'chronology.openDriveFile'
   }), "<span class=\"").concat(TIMELINE_HINT_CLASS, "\">").concat(newWindowHintText(), "</span></a>");
   return _objectSpread2(_objectSpread2({}, media), {}, {
     url: driveThumbnail(id),
     thumbnail: driveThumbnail(id),
     alt: alt,
-    /* 套件沒有 title 時拿圖說當圖片 title，會變成「觀看影片…」，但圖片本身不是連結 */
+    /* 套件沒有 title 時拿圖說當圖片 title，會帶進連結文字，但圖片本身不是連結 */
     title: alt,
     /* 連結放在圖說，不包在圖片上：同一個目的地只留一個連結，文字也看得到 */
-    caption: [watch, hint(media.caption)].filter(Boolean).join('<br />'),
+    caption: [open, hint(media.caption)].filter(Boolean).join('<br />'),
     link: undefined
   });
 };

package/lib/utils/syncTimelineA11y.js

@@ -31,8 +31,20 @@ var syncTimelineA11y = function syncTimelineA11y(timeline, root) {
       if (label && label.indexOf(hint) !== -1) nav.setAttribute('aria-label', label.split(hint).join(''));
     });
   };
+  /* TimelineJS 先把「下一張」再把「上一張」加進 DOM（StorySlider.js），Tab 會先到畫面右邊的「下一張」。
+     兩個箭頭都是絕對定位，把「上一張」移到前面不影響畫面，焦點順序改為由左到右（2026-10-08 人工測試回饋） */
+  var orderNav = function orderNav() {
+    var prev = root.querySelector('.tl-slidenav-previous');
+    var next = root.querySelector('.tl-slidenav-next');
+    if (!prev || !next || prev.parentNode !== next.parentNode) return;
+    // eslint-disable-next-line no-bitwise
+    if (prev.compareDocumentPosition(next) & Node.DOCUMENT_POSITION_PRECEDING) {
+      next.parentNode.insertBefore(prev, next);
+    }
+  };
   var timer;
   var apply = function apply() {
+    orderNav();
     syncInert();
     syncNavLabels();
     /* 套件在同一輪事件裡才更新箭頭標題，下一輪再整理一次 */

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@daoyi/nmtl-ui",
 	"packageManager": "pnpm@10.34.5",
-	"version": "2.0.1-beta.135",
+	"version": "2.0.1-beta.137",
 	"description": "This project is to be used as a starter kit for building React component using Storybook and Rollup",
 	"author": "daoyi",
 	"main": "lib/index.js",
@@ -26,6 +26,7 @@
 		"d3-selection": "1.4.2",
 		"d3-transition": "1.3.2",
 		"dom-to-image": "2.6.0",
+		"dompurify": "2.5.8",
 		"formik": "2.2.9",
 		"html-to-react": "1.4.5",
 		"jquery": "3.6.0",