diff --git a/package-lock.json b/package-lock.json
index 6e674a6d..f8a022a9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -590,9 +590,9 @@
       }
     },
     "dompurify": {
-      "version": "1.0.8",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-1.0.8.tgz",
-      "integrity": "sha512-vetRFbN1SXSPfP3ClIiYnxTrXquSqakBEOoB5JESn0SVcSYzpu6ougjakpKnskGctYdlNpwf+riUHSkG7d4XUw=="
+      "version": "2.0.17",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.0.17.tgz",
+      "integrity": "sha512-nNwwJfW55r8akD8MSFz6k75bzyT2y6JEa1O3JrZFBf+Y5R9JXXU4OsRl0B9hKoPgHTw2b7ER5yJ5Md97MMUJPg=="
     },
     "domutils": {
       "version": "1.4.3",
diff --git a/package.json b/package.json
index 28f5739a..0f357fed 100644
--- a/package.json
+++ b/package.json
@@ -18,7 +18,7 @@
   },
   "dependencies": {
     "async": "~0.2.9",
-    "dompurify": "^1.0.2",
+    "dompurify": "^2.0.17",
     "etch": "0.9.0",
     "fs-plus": "^3.0.0",
     "fuzzaldrin": "^2.1",