kohlerjoshua/FHGR_Frontend_Group_3_Project
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

Textbox sanitization #16

New Issue
Closed
opened 2026-06-07 15:58:18 +02:00 by rueeggeandre · 1 comment
rueeggeandre commented 2026-06-07 15:58:18 +02:00
Collaborator
Copy Link

Sanitize the text inputs given by the user to prevent injection

Sanitize the text inputs given by the user to prevent injection
rueeggeandre self-assigned this 2026-06-07 15:58:24 +02:00
rueeggeandre commented 2026-06-07 23:13:53 +02:00
Author
Collaborator
Copy Link
  • Backend now validates and normalizes all JSON input.
  • Text fields must be strings and have length limits.
  • Non-printing control characters are removed.
  • Marker coordinates, visibility values, marker counts, and image metadata are validated.
  • Clients can no longer inject arbitrary comments through journey updates.
  • HTML text and attributes are properly escaped before rendering.
  • Unsafe URL schemes such as javascript: are rejected.
  • Marker popup/title stored-XSS paths are fixed.
  • Raw HTML in Markdown renders as text instead of executing.
  • Frontend fields now mirror backend length limits.
- Backend now validates and normalizes all JSON input. - Text fields must be strings and have length limits. - Non-printing control characters are removed. - Marker coordinates, visibility values, marker counts, and image metadata are validated. - Clients can no longer inject arbitrary comments through journey updates. - HTML text and attributes are properly escaped before rendering. - Unsafe URL schemes such as javascript: are rejected. - Marker popup/title stored-XSS paths are fixed. - Raw HTML in Markdown renders as text instead of executing. - Frontend fields now mirror backend length limits.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
fleppstiafen itenmarcalex rueeggeandre kohlerjoshua
No Assignees rueeggeandre
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: kohlerjoshua/FHGR_Frontend_Group_3_Project#16
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?