search

DasRed / js-bbcode-parser

24 stars 7 forks source link

Give users a note on security issues (XSS) #16

Closed Ari24-cb24 closed 9 months ago

Ari24-cb24 commented 2 years ago

js-bbcode-parser does not purify the user input for xss so it might be a good idea to give the person using the library a short note (e.g include it in the README)

Another idea would be to implement such checks into the library

Ari24-cb24 commented 2 years ago

Might also mention the library DomPurify, its easy to import and should be secure enough

DasRed commented 9 months ago

added this information to the README in version v5.0.3

thx. for your hint :)