osPrims / chatApp

A chatroom based web application built using Express.js and Socket.IO
https://chatapp-wuhy.onrender.com/
MIT License
22 stars 53 forks source link

restrict markdown/HTML #173

Open osBins opened 1 year ago

osBins commented 1 year ago

Currently, the chatApp is vulnerable in the sense, all HTML tags, and styling attributes can be applied to messages sent on chatApp. We need to enable markdown and the only features that need to be implemented are -

image

dawkrish commented 1 year ago

We have to write code such that we can use markdown in your chat app ?

osBins commented 1 year ago

The code is already there. We just need to change a few flags of the markdown-it package to disable the HTML and yes, enable the use of markdown in chatApp.

KossakowskaKarolina commented 1 year ago

image @osBins Isn't it already resolved?