ESR dependency update for html sanitizer