fix(security): sanitize CMS content to prevent XSS attacks

- Add DOMPurify to sanitize HTML content in LegalPage component - Prevents stored XSS vulnerabilities in CMS-managed content - Maintains legitimate HTML formatting while removing malicious scripts - Addresses critical XSS vulnerability from security scan 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>
2025-07-13 19:11:02 +02:00
parent e35ac6a41c
commit 051e21cbaf
3 changed files with 32 additions and 3 deletions
@@ -15,10 +15,12 @@
    "@tiptap/extension-link": "^2.25.0",
    "@tiptap/react": "^2.25.0",
    "@tiptap/starter-kit": "^2.25.0",
+    "@types/dompurify": "^3.0.5",
    "@types/react-google-recaptcha": "^2.1.9",
    "axios": "^1.3.2",
    "clsx": "^2.0.0",
    "date-fns": "^2.29.3",
+    "dompurify": "^3.2.6",
    "i18next": "^25.3.1",
    "i18next-browser-languagedetector": "^8.2.0",
    "i18next-http-backend": "^3.0.2",