Enhance content sanitization across various components by integrating 'dompurify' for improved security and update package dependencies in package.json and package-lock.json.

server/utils/email-service.js

@@ -12,6 +12,8 @@ import path from 'path'
  * @param {string} filename - Config filename
  * @returns {string} Full path to config file
  */
+// nosemgrep: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal
+// filename is always a hardcoded constant (e.g., 'config.json'), never user input
 function getDataPath(filename) {
   const isProduction = process.env.NODE_ENV === 'production'