Skip to content

fix: XSS prevention and frontend cleanup#201

Closed
ChinmayShringi wants to merge 1 commit intomainfrom
fix/frontend-xss-cleanup
Closed

fix: XSS prevention and frontend cleanup#201
ChinmayShringi wants to merge 1 commit intomainfrom
fix/frontend-xss-cleanup

Conversation

@ChinmayShringi
Copy link
Owner

Summary

  • Add DOMPurify dependency and create sanitize.js utility
  • Sanitize all v-html content through renderMarkdown() in Step4Report and Step5Interaction
  • Guard all setInterval calls with clearInterval to prevent timer leaks in Step3Simulation, MainView, SimulationRunView

Test plan

  • Verify frontend builds: cd frontend && npm run build
  • Test report and interaction views render markdown correctly
  • Verify no duplicate timers accumulate during navigation

Original PR: 666ghj/MiroFish#231
Original Author: @0xNyk

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant