Merge pull request #6551 from backstage/iameap/dompurify

[TechDocs] Use "secure by default" sanitization library

plugins/techdocs/package.json

@@ -44,6 +44,7 @@
     "@material-ui/icons": "^4.9.1",
     "@material-ui/lab": "4.0.0-alpha.45",
     "@material-ui/styles": "^4.10.0",
+    "dompurify": "^2.2.9",
     "eventsource": "^1.1.0",
     "react": "^16.13.1",
     "react-dom": "^16.13.1",
@@ -51,8 +52,7 @@
     "react-router": "6.0.0-beta.0",
     "react-router-dom": "6.0.0-beta.0",
     "react-use": "^17.2.4",
-    "react-text-truncate": "^0.16.0",
-    "sanitize-html": "^2.3.2"
+    "react-text-truncate": "^0.16.0"
   },
   "devDependencies": {
     "@backstage/cli": "^0.7.5",
@@ -63,6 +63,7 @@
     "@testing-library/react": "^11.2.5",
     "@testing-library/react-hooks": "^3.4.2",
     "@testing-library/user-event": "^13.1.8",
+    "@types/dompurify": "^2.2.2",
     "@types/eventsource": "^1.1.5",
     "@types/jest": "^26.0.7",
     "@types/node": "^14.14.32",