Erik Michelson dd40a6c04b fix(auth): sanitize email addresses ...

Previously, maliciously crafted email addresses
could be used to sneak HTML code into the HedgeDoc
editor, since HedgeDoc uses the local part of the
address as a display name for users.
We're now sanitizing this using DOMPurify.

Co-authored-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>

2026-06-18 23:56:45 +02:00

..

features.md

docs(features): clarification on locations for light/dark mode (#6355)

2026-02-15 21:07:54 +01:00

privacy.md.example

Replace CodiMD with HedgeDoc

2020-11-14 21:18:36 +01:00

release-notes.md

fix(auth): sanitize email addresses

2026-06-18 23:56:45 +02:00

slide-example.md

style: linting markdown files

2020-07-10 18:57:59 +02:00

yaml-metadata.md

Update public/docs/yaml-metadata.md

2022-09-05 10:11:48 +02:00