Andrey Antukh 252683eac8 🐛 Sanitize SVG files on upload to prevent XSS ...

Add sanitize-svg function that removes dangerous elements and attributes:
- script tags
- foreignObject elements
- Event handler attributes (onload, onmouseover, etc.)
- javascript: URLs from href/xlink:href attributes

Apply sanitization in process-main-image before storing SVG files.

AI-assisted-by: mimo-v2.5

2026-08-03 18:26:47 +02:00

..

dev

♻️ Refactor internal organization of system initialization

2026-07-22 14:18:51 +02:00

resources

🐛 Add concurrency limit to import-binfile RPC handler

2026-08-03 18:26:47 +02:00

scripts

♻️ Rename nitrate config to admin-console (#10929)

2026-08-03 17:23:55 +02:00

src

🐛 Sanitize SVG files on upload to prevent XSS

2026-08-03 18:26:47 +02:00

test/backend_tests

🐛 Sanitize SVG files on upload to prevent XSS

2026-08-03 18:26:47 +02:00

build.clj

🐛 Fix unexpected exception on logger caused by log4j2 plugin

2023-02-11 00:52:23 +01:00

deps.edn

⬆️ Update dependencies (#10982)

2026-07-31 18:53:05 +02:00

package.json

📎 Add minor changes on backend package.json

2026-08-01 11:20:31 +02:00

pnpm-lock.yaml

⬆️ Update dependencies

2026-06-30 16:15:30 +02:00

pnpm-workspace.yaml

🎉 Migrate to PNPM backend module

2026-01-22 13:55:41 +01:00

tests.edn

🔧 Change backend test runner to kaocha

2024-05-29 19:05:04 +02:00