lockbitchat e209d3e6f5 fix: improve sanitization to prevent XSS ...

- Now the sanitization function protects against:
  - Nested script tags: <scrip<script>alert("XSS")</script>t>
  - HTML comments containing scripts: <!-- <script>alert("XSS")</script> -->
  - Multiple overlapping tags: <script><script>alert("XSS")</script></script>
  - Attributes in closing tags: </script foo="bar">
  - Complex nested structures combining different tags
  - All known XSS vectors

2025-10-19 23:23:58 -04:00

642 KiB

Raw Blame History

View Raw