Give users a note on security issues (XSS)
Ari24-cb24 opened this issue · 2 comments
Ari24-cb24 commented
js-bbcode-parser does not purify the user input for xss so it might be a good idea to give the person using the library a short note (e.g include it in the README)
Another idea would be to implement such checks into the library
Ari24-cb24 commented
Might also mention the library DomPurify, its easy to import and should be secure enough
DasRed commented
added this information to the README in version v5.0.3
thx. for your hint :)