• Alexander Turinske's avatar
    Sanitize vulnerability history comment · d0e3bb36
    Alexander Turinske authored
    - add sanitation to vulnerability history comments
    - add additional tests for XSS of alert and iframe
    - add changelog for comment sanitization
    - use comment.note_url instead of comment.note to render html
    - use .md class to normalize incoming CSS
    - Use v-html on note_url
    - Update sanitize import to come from dompurify
    - we no longer use the library `sanitize-html`, but instead use
      the library `dompurify`
    - use the `sanitize` method from `dompurify` and update tests
    d0e3bb36
security-219378-xss-on-vulnerability-history.yml 88 Bytes