Fix for Cross-Site Scripting (XSS) Vulnerability

[gtsp233]

Fix for Cross-Site Scripting (XSS) Vulnerability

Hi, I've found a Cross-Site Scripting (XSS) vulnerability in the package @icedesign/richtext-renderer.

Vulnerability Details:

• Severity: High/Critical
• Description: There's a risk of malicious script execution when the html in controlled by an advorsary.

Steps to Reproduce(POC):

import RichtextRenderer from "@icedesign/richtext-renderer"
import React from "react";
import ReactDOM from "react-dom/client";

const root = ReactDOM.createRoot(document.getElementById("root"));

function App() {
  return (
    <RichtextRenderer html="<img src='' onerror=alert(1)" />
  );
}
root.render(<App />);

Suggested Fix or Mitigation: Sanitize the html before rendering it using dangerouslySetInnerHtml

I've already fixed and tested this issue, and have submitted a pull request with the necessary changes. Please review and merge my pull request to resolve this vulnerability. Thanks!