From 6cb5360c88b604057b765ad27a1fcd54fc5e6745 Mon Sep 17 00:00:00 2001
From: Jessica Lawshe <5312836+lawshe@users.noreply.github.com>
Date: Tue, 18 Mar 2025 07:36:57 -0500
Subject: [PATCH] Merge pull request #24339 from overleaf/jel-xml-crypto

[web] Upgrade `xml-crypto` in web

GitOrigin-RevId: 0fa810d227da9c65031b843958f8b5e796e3adc8
---
 package-lock.json         | 24 +++++++++++++++++++++++-
 services/web/package.json |  2 +-
 2 files changed, 24 insertions(+), 2 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index a26154b269..e7b462be63 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -44257,7 +44257,7 @@
         "utf-8-validate": "^5.0.2",
         "valid-data-url": "^2.0.0",
         "valid-url": "^1.0.9",
-        "xml-crypto": "^2.1.2",
+        "xml-crypto": "^2.1.6",
         "xml2js": "^0.6.2",
         "xregexp": "^4.3.0",
         "yauzl": "^2.10.0"
@@ -45719,6 +45719,28 @@
         "loose-envify": "^1.0.0"
       }
     },
+    "services/web/node_modules/xml-crypto": {
+      "version": "2.1.6",
+      "resolved": "https://registry.npmjs.org/xml-crypto/-/xml-crypto-2.1.6.tgz",
+      "integrity": "sha512-jjvpO8vHNV8QFhW5bMypP+k4BjBqHe/HrpIwpPcdUnUTIJakSIuN96o3Sdah4tKu2z64kM/JHEH8iEHGCc6Gyw==",
+      "license": "MIT",
+      "dependencies": {
+        "@xmldom/xmldom": "^0.7.9",
+        "xpath": "0.0.32"
+      },
+      "engines": {
+        "node": ">=0.4.0"
+      }
+    },
+    "services/web/node_modules/xpath": {
+      "version": "0.0.32",
+      "resolved": "https://registry.npmjs.org/xpath/-/xpath-0.0.32.tgz",
+      "integrity": "sha512-rxMJhSIoiO8vXcWvSifKqhvV96GjiD5wYb8/QHdoRyQvraTpp4IEv944nhGausZZ3u7dhQXteZuZbaqfpB7uYw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.6.0"
+      }
+    },
     "services/web/node_modules/yallist": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
diff --git a/services/web/package.json b/services/web/package.json
index df6d572fc5..4347d6e169 100644
--- a/services/web/package.json
+++ b/services/web/package.json
@@ -169,7 +169,7 @@
     "utf-8-validate": "^5.0.2",
     "valid-data-url": "^2.0.0",
     "valid-url": "^1.0.9",
-    "xml-crypto": "^2.1.2",
+    "xml-crypto": "^2.1.6",
     "xml2js": "^0.6.2",
     "xregexp": "^4.3.0",
     "yauzl": "^2.10.0"