aethex-forge/client
Claude 77a2fa68c6
Fix XSS vulnerability by sanitizing HTML in blog posts
Added DOMPurify library to sanitize HTML content before rendering with
dangerouslySetInnerHTML. This prevents Cross-Site Scripting (XSS) attacks
where malicious scripts could be injected through blog post content.

Changes:
- Installed dompurify and @types/dompurify
- Added HTML sanitization in BlogPost.tsx (client/pages/BlogPost.tsx:139)
- Added HTML sanitization in AdminBlogEditor.tsx preview (client/components/admin/AdminBlogEditor.tsx:273)

Security impact: HIGH - Previously, unsanitized HTML from the API could
execute arbitrary JavaScript, potentially stealing user credentials or
performing unauthorized actions.
2026-01-03 02:36:13 +00:00
..
api Add ecosystem filtering to opportunities and update posting form 2025-12-13 02:25:12 +00:00
components Fix XSS vulnerability by sanitizing HTML in blog posts 2026-01-03 02:36:13 +00:00
contexts Add a way to display participants in an activity 2025-12-13 04:51:25 +00:00
data Prettier format pending files 2025-10-19 06:00:42 +00:00
desktop Update application to include desktop build and release configurations 2025-12-05 23:20:50 +00:00
hooks Award experience points for user actions and improve level-up notifications 2025-12-12 23:44:00 +00:00
lib Add core architecture, API endpoints, and UI components for NEXUS 2025-12-13 03:01:54 +00:00
pages Fix XSS vulnerability by sanitizing HTML in blog posts 2026-01-03 02:36:13 +00:00
App.tsx Update routing to keep GameForge management local on aethex.dev 2025-12-13 03:46:16 +00:00
desktop-main.html Refactor desktop application and improve Electron integration 2025-12-05 22:36:13 +00:00
desktop-overlay.html Refactor desktop application and improve Electron integration 2025-12-05 22:36:13 +00:00
global.css completionId: cgen-0a8ee54525e8482880312880617b999e 2025-11-13 05:41:14 +00:00
main.tsx Refactor desktop application and improve Electron integration 2025-12-05 22:36:13 +00:00
vite-env.d.ts Initial commit 2025-08-05 20:03:34 +00:00