Files
Nawaz Dhandala b10d2f458e fix(security): sanitize markdown HTML output to prevent XSS (GHSA-h5pr-pg74-99m2)
Replace inadequate <script> tag regex with proper sanitization:
- Server-side: override marked's html renderer to escape raw HTML tokens
- Client-side: sanitize preview output with DOMPurify before rendering
2026-03-19 22:16:56 +00:00
..