Adds OWASP Java HTML Sanitizer on the backend and DOMPurify on the frontend. Together with Tiptap on the writer side they form a defense-in-depth chain against XSS in the new Geschichte body field (issue #381). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
7.5 KiB
7.5 KiB