lockbitchat
5096a09811
fix: improve sanitization to prevent XSS
- Now the sanitization function protects against:
- Nested script tags: <scrip<script>alert("XSS")</script>t>
- HTML comments containing scripts: <!-- <script>alert("XSS")</script> -->
- Multiple overlapping tags: <script><script>alert("XSS")</script></script>
- Attributes in closing tags: </script foo="bar">
- Complex nested structures combining different tags
- All known XSS vectors
2025-10-19 23:54:26 -04:00
..
2025-10-19 23:23:58 -04:00
2025-10-19 23:39:14 -04:00
2025-10-19 20:51:44 -04:00
2025-10-19 20:51:44 -04:00
2025-10-19 23:54:26 -04:00
2025-10-05 06:21:14 -04:00