diff --git a/client/package-lock.json b/client/package-lock.json
index bf1040d0..ae95b696 100644
--- a/client/package-lock.json
+++ b/client/package-lock.json
@@ -1741,9 +1741,9 @@
       "dev": true
     },
     "dompurify": {
-      "version": "2.0.11",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.0.11.tgz",
-      "integrity": "sha512-qVoGPjIW9IqxRij7klDQQ2j6nSe4UNWANBhZNLnsS7ScTtLb+3YdxkRY8brNTpkUiTtcXsCJO+jS0UCDfenLuA=="
+      "version": "2.0.17",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.0.17.tgz",
+      "integrity": "sha512-nNwwJfW55r8akD8MSFz6k75bzyT2y6JEa1O3JrZFBf+Y5R9JXXU4OsRl0B9hKoPgHTw2b7ER5yJ5Md97MMUJPg=="
     },
     "duplexer2": {
       "version": "0.1.4",
diff --git a/client/package.json b/client/package.json
index e581cd63..6c816432 100644
--- a/client/package.json
+++ b/client/package.json
@@ -6,7 +6,7 @@
     "watch": "c1=\"\";while :;do c2=$(find html js css img -type f -and -not -iname '*autogen*'|sort|xargs cat|md5sum);[[ $c1 != $c2 ]]&&npm run build -- --debug --no-vendor-js;c1=$c2;sleep 1;done"
   },
   "dependencies": {
-    "dompurify": "^2.0.11",
+    "dompurify": "^2.0.17",
     "font-awesome": "^4.7.0",
     "ios-inner-height": "^1.0.3",
     "js-cookie": "^2.2.0",