feat(security): sanitize SVG files on upload

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
This commit is contained in:
Erik Michelson
2026-02-03 23:02:49 +01:00
parent b930fe04ce
commit f910000d2b
3 changed files with 374 additions and 49 deletions

View File

@@ -37,6 +37,7 @@
"cookie-parser": "1.4.7",
"deep-freeze": "0.0.1",
"diff-match-patch": "git+https://github.com/hackmdio/diff-match-patch.git#commit=59a9395ad9fe143e601e7ae5765ed943bdd2b11e",
"dompurify": "3.3.1",
"ejs": "3.1.10",
"express": "4.22.1",
"express-rate-limit": "8.2.1",
@@ -47,7 +48,7 @@
"helmet": "8.1.0",
"i18n": "0.15.3",
"is-svg": "4.4.0",
"jsdom-nogyp": "0.8.3",
"jsdom": "24.1.3",
"lodash": "4.17.23",
"lutim": "1.0.3",
"lz-string": "git+https://github.com/hackmdio/lz-string.git#commit=6edfccb79cd8c210f03fd3bf18e41ca144fbeefb",