feat: DOMPurify HTML sanitization (P3)

Replace regex-based stripScriptTags with isomorphic-dompurify: - Whitelist-based HTML sanitization prevents XSS bypasses - Removes scripts, event handlers, and dangerous attributes - Preserves data: URIs for inlined CSS/images - Maintains complete document structure for Tizen TVs Also updates: - Data flow diagram comments (SEC 19) - Modification guide comments - Dependencies (isomorphic-dompurify ^2.36.0)
2026-06-24 07:46:05 +02:00
parent f17d2f533a
commit d46f9644bb
3 changed files with 152 additions and 10 deletions
@@ -11,6 +11,7 @@
    "fmt:check": "oxfmt --check"
  },
  "dependencies": {
+    "isomorphic-dompurify": "^2.24.0",
    "puppeteer": "^24.43.1"
  },
  "devDependencies": {