Enhance security by adding DOMPurify sanitization comments in newsletter and Vereins components, and update path handling comments in server utilities to address potential path traversal vulnerabilities.

2025-12-20 10:54:49 +01:00
parent 316cce1b26
commit 968c749fe3
12 changed files with 33 additions and 1 deletions
--- a/pages/verein/tt-regeln.vue
+++ b/pages/verein/tt-regeln.vue
@@ -4,6 +4,8 @@
      <h1 class="text-4xl sm:text-5xl font-display font-bold text-gray-900 mb-6">
        TT-Regeln
      </h1>
+      <!-- nosemgrep: javascript.vue.security.audit.xss.templates.avoid-v-html -->
+      <!-- content is sanitized with DOMPurify in computed property -->
      <div
        class="prose prose-lg max-w-none"
        v-html="content"