Commit graph

17 commits

Author SHA1 Message Date
Claude
77a2fa68c6
Fix XSS vulnerability by sanitizing HTML in blog posts
Added DOMPurify library to sanitize HTML content before rendering with
dangerouslySetInnerHTML. This prevents Cross-Site Scripting (XSS) attacks
where malicious scripts could be injected through blog post content.

Changes:
- Installed dompurify and @types/dompurify
- Added HTML sanitization in BlogPost.tsx (client/pages/BlogPost.tsx:139)
- Added HTML sanitization in AdminBlogEditor.tsx preview (client/components/admin/AdminBlogEditor.tsx:273)

Security impact: HIGH - Previously, unsanitized HTML from the API could
execute arbitrary JavaScript, potentially stealing user credentials or
performing unauthorized actions.
2026-01-03 02:36:13 +00:00
Builder.io
3e18f0fff9 Add CTA section to BlogPost page layout
cgen-53f13f605beb4decb302436473b0c87f
2025-11-15 19:46:23 +00:00
Builder.io
f202cbd5ce Add CTAs to BlogPost page
cgen-257db0855ebd4b6f9ce22b4cb2a1ba55
2025-11-15 19:46:19 +00:00
Builder.io
381a7dff27 Prettier format pending files 2025-11-13 03:24:02 +00:00
Builder.io
7c85b114b6 Add API_BASE and update track fetch
cgen-6d22f09563674e92837ccc9fe4e9af9f
2025-11-13 02:50:43 +00:00
Builder.io
c6e3f7b4e6 completionId: cgen-524f9880492f4a358c7402f466038e1d
cgen-524f9880492f4a358c7402f466038e1d
2025-11-11 23:00:14 +00:00
Builder.io
68de139298 completionId: cgen-f725cfc4588a4abe96f639f9a0774169
cgen-f725cfc4588a4abe96f639f9a0774169
2025-11-11 23:00:08 +00:00
Builder.io
fb33214954 Prettier format pending files 2025-10-19 21:31:09 +00:00
Builder.io
b4b19e24f5 Wrap BlogPost with fragment + SEO and close properly
cgen-b325fba52e144ef7940096680b4e7b40
2025-10-19 21:24:17 +00:00
Builder.io
82e5904059 Import SEO in BlogPost
cgen-3f59d8b9be5c47fe8aa689456344b40c
2025-10-19 21:24:08 +00:00
Builder.io
343cb39f73 Add fallback Supabase fetch in BlogPost
cgen-345dafe77cd8422bbb20e48d3572f1db
2025-10-14 04:44:15 +00:00
Builder.io
0c274f8f3a Update 404 references in BlogPost
cgen-0bf13c26f05f48149558c9a402fa9fd5
2025-09-30 08:23:10 +00:00
Builder.io
3d3b12aa7f Prettier format pending files 2025-09-30 00:04:20 +00:00
Builder.io
43f9a90597 Replace Builder fetch with Supabase API fetch in BlogPost
cgen-16c55da799704358874168837ef4db5f
2025-09-29 23:55:30 +00:00
Builder.io
48ba57e02d Switch BlogPost.tsx to use Supabase API
cgen-a17a02195ebf4fa3a01f54120c475be7
2025-09-29 23:55:19 +00:00
Builder.io
1ab3d23145 Wire BlogPost page to Builder CMS
cgen-f46d9cc87ed543389a7b64f959a3b218
2025-09-29 04:09:19 +00:00
Builder.io
7f06edee12 Add BlogPost page
cgen-2460306e91a5433ca2a0a06640ae6219
2025-09-29 04:04:53 +00:00