cyb3rfox / Aurora-Incident-Response

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders
Apache License 2.0
742 stars 79 forks source link

Add input sanitization #91

Closed TheBFL closed 1 year ago

TheBFL commented 1 year ago

Add a "renderSafe" function to all text-based fields that encodes html tags to prevent the possibility of an XSS style attack. Previously there was the potential for running arbitrary code upon opening of a maliciously crafted file; this PR should fix that.

cyb3rfox commented 1 year ago

Thank you :)