Add security checks on all inputs

djplaner / canvas-collections

Transform Canvas LMS modules by adding structure, visuals, and context

https://djplaner.github.io/canvas-collections/

GNU General Public License v3.0

1 stars 0 forks source link

Add security checks on all inputs #106

Closed djplaner closed 1 year ago

djplaner commented 2 years ago

Both forms and config file

[ ] Explore use of form input types and related
[ ] Use of DomPurify on config file reading
[ ] DomPurify on description? and other inputs?

Background

Limits to what can be done on the client side. Focus on data validation internally and sanity checking the description HTML coming from the config file

djplaner commented 2 years ago

MDN client-side form validation

Mostly low level basics

djplaner commented 1 year ago

Merged with #145