Sanitize user input by replacing innerHTML with textContent to prevent XSS in message username and content rendering.#11

Open

zeropath-ai[bot] wants to merge 2 commits intomasterfrom

zvuln_fix_cross_site_scripting_xss_1751928060314614

Commits on Jul 7, 2025

fix: prevent XSS by using textContent instead of innerHTML for messages
ZeroPath
committed
fix: replace innerHTML with textContent to prevent XSS vulnerability
ZeroPath
committed