Files
hedgedoc-hedgeagent/lib/models
Erik Michelson dd40a6c04b fix(auth): sanitize email addresses
Previously, maliciously crafted email addresses
could be used to sneak HTML code into the HedgeDoc
editor, since HedgeDoc uses the local part of the
address as a display name for users.
We're now sanitizing this using DOMPurify.

Co-authored-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
2026-06-18 23:56:45 +02:00
..
2021-02-15 12:15:14 +01:00
2025-11-22 01:05:50 +01:00
2025-11-22 01:05:50 +01:00
2026-06-18 23:56:45 +02:00