search

astrosonic / sanctuary

A secure synchronous lightweight chatroom with zero logging and total transience
GNU General Public License v3.0
54 stars 11 forks source link

Sanitizing scripts given as input from the text box. #48

Open mohitgurav opened 4 years ago

gridhead commented 4 years ago

The simple way of doing this could be simply avoiding text with <script> and </script> substrings as their constituent but there may be a way around that too.

Clemens-E commented 4 years ago

The simple way is also the useless way, there will still be loads of ways to run JavaScript in the client, even if you filter out script tags.

gridhead commented 4 years ago

but there may be a way around that too.

I seem to have specified that too. @Clemens-E I could use some assistance if you are willing to provide for solving this issue early. :sweat_smile:

(Not that I would not be able to do so by myself but doing alone would take it considerably long)

VaibhavSaini19 commented 4 years ago

@t0xic0der I would like to work on this issue

gridhead commented 4 years ago

Cool. I will assign you this issue. Be sure to get yourself registered at https://organize.mlh.io/participants/events/4659-hack-astrosonic, our official Hacktoberfest event to stay in touch with the fellow contributors of this project.

Also, feel free to leave a star on the project - should you find it worth your time. Happy hacking! :smile: