Escaping HTML & JS in Messages
Open
bug
help wanted
question
- Dominant language
- Elixir
- Stars
- 65
- Forks
- 8
- PR merge metrics
- No merged PRs in 30d
Description
To prevent JS injection and other malicious XSS etc. e.g:
We need to escape all input in the chat.
> The _question_ is: should we escape the messages on the client, server or _both_ ?
relates to: https://github.com/dwyl/chat/pull/24 by @alanshaw
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.