Bump dompurify from 1.0.4 to 1.0.9

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 1.0.4 to 1.0.9.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/1.0.4...1.0.9)

Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

package-lock.json

@@ -1024,7 +1024,7 @@
     },
     "Select2": {
       "version": "git+https://github.com/select2/select2.git#b5f3b2839c48c53f9641d6bb1bccafc5260c7620",
-      "from": "git+https://github.com/select2/select2.git#3.4.8"
+      "from": "git+https://github.com/select2/select2.git#b5f3b2839c48c53f9641d6bb1bccafc5260c7620"
     },
     "acorn": {
       "version": "5.7.3",
@@ -2095,9 +2095,9 @@
       "dev": true
     },
     "dompurify": {
-      "version": "1.0.4",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-1.0.4.tgz",
-      "integrity": "sha512-Y/HFiY5NACdpMs8DJQhNCjF8Kj6msjQRLW5fgD628gBk6a2tjZcVN57SF/PvEgogxsrBPXOF0f3d6qNiAdIYoA=="
+      "version": "1.0.9",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-1.0.9.tgz",
+      "integrity": "sha512-lt9f3A3RO1OCNaWdA+s/k7YVn0Typ5MbAKmX94PLCZbs8wLNccX3Bj4xXA7GLKOoDb/MeVoAoeIJarZD1JUnjg=="
     },
     "duplexify": {
       "version": "3.6.1",

package.json

@@ -29,7 +29,7 @@
     "clipboard": "^2.0.4",
     "css-vars-ponyfill": "^1.16.2",
     "davclient.js": "git+https://github.com/owncloud/davclient.js.git#0.1.2",
-    "dompurify": "^1.0.4",
+    "dompurify": "^1.0.9",
     "handlebars": "^4.0.5",
     "jcrop": "git+https://github.com/ChristophWurst/Jcrop.git#v0.9.12-npm",
     "jquery": "^2.1.4",