Bump eslint-plugin-security from 1.7.0 to 2.1.0

Bumps [eslint-plugin-security](https://github.com/eslint-community/eslint-plugin-security) from 1.7.0 to 2.1.0.
- [Release notes](https://github.com/eslint-community/eslint-plugin-security/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-security/blob/main/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-security@v1.7.0...v2.1.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-security
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

.eslintrc.js

@@ -10,7 +10,7 @@ module.exports = {
     ],
     "extends": [
         "eslint:recommended",
-        "plugin:security/recommended"
+        "plugin:security/recommended-legacy"
     ],
     "parserOptions": {
         "ecmaVersion": 6,

package.json

@@ -49,7 +49,7 @@
     "chai": "^4.0.1",
     "eslint": "~8.56.0",
     "eslint-plugin-no-unsafe-innerhtml": "^1.0.16",
-    "eslint-plugin-security": "^1.4.0",
+    "eslint-plugin-security": "^2.1.0",
     "loglevel": "^1.4.1",
     "mocha": "^10.0.0",
     "mocha-headless-chrome": "^4.0.0",