Enhance security by adding DOMPurify sanitization comments in newsletter and Vereins components, and update path handling comments in server utilities to address potential path traversal vulnerabilities.
This commit is contained in:
@@ -4,6 +4,8 @@
|
||||
<h1 class="text-4xl sm:text-5xl font-display font-bold text-gray-900 mb-6">
|
||||
Über uns
|
||||
</h1>
|
||||
<!-- nosemgrep: javascript.vue.security.audit.xss.templates.avoid-v-html -->
|
||||
<!-- content is sanitized with DOMPurify in computed property -->
|
||||
<div
|
||||
class="prose prose-lg max-w-none"
|
||||
v-html="content"
|
||||
|
||||
Reference in New Issue
Block a user