• Alexander Turinske's avatar
    Sanitize vulnerability history comment · d0e3bb36
    Alexander Turinske authored
    - add sanitation to vulnerability history comments
    - add additional tests for XSS of alert and iframe
    - add changelog for comment sanitization
    - use comment.note_url instead of comment.note to render html
    - use .md class to normalize incoming CSS
    - Use v-html on note_url
    - Update sanitize import to come from dompurify
    - we no longer use the library `sanitize-html`, but instead use
      the library `dompurify`
    - use the `sanitize` method from `dompurify` and update tests
    d0e3bb36
To find the state of this project's repository at the time of any of these versions, check out the tags.
history_comment_spec.js 9.33 KB