Enhance security by adding DOMPurify sanitization comments in newsletter and Vereins components, and update path handling comments in server utilities to address potential path traversal vulnerabilities.
This commit is contained in:
@@ -5,6 +5,8 @@
|
||||
Satzung
|
||||
</h1>
|
||||
|
||||
<!-- nosemgrep: javascript.vue.security.audit.xss.templates.avoid-v-html -->
|
||||
<!-- content is sanitized with DOMPurify in computed property -->
|
||||
<div
|
||||
class="prose prose-lg max-w-none mb-8"
|
||||
v-html="content"
|
||||
|
||||
Reference in New Issue
Block a user