js-bbcode-parser icon indicating copy to clipboard operation
js-bbcode-parser copied to clipboard
verified publisher icon DasRed

Give users a note on security issues (XSS)

Open Ari24-cb24 opened this issue 3 years ago • 1 comments

js-bbcode-parser does not purify the user input for xss so it might be a good idea to give the person using the library a short note (e.g include it in the README)

Another idea would be to implement such checks into the library

Ari24-cb24 avatar Jan 27 '22 12:01 Ari24-cb24

Might also mention the library DomPurify, its easy to import and should be secure enough

Ari24-cb24 avatar Jan 27 '22 12:01 Ari24-cb24