Files
biggy d46f9644bb feat: DOMPurify HTML sanitization (P3)
Replace regex-based stripScriptTags with isomorphic-dompurify:
- Whitelist-based HTML sanitization prevents XSS bypasses
- Removes scripts, event handlers, and dangerous attributes
- Preserves data: URIs for inlined CSS/images
- Maintains complete document structure for Tizen TVs

Also updates:
- Data flow diagram comments (SEC 19)
- Modification guide comments
- Dependencies (isomorphic-dompurify ^2.36.0)
2026-06-24 07:46:05 +02:00

25 lines
617 B
JSON

{
"name": "samsung-tv-server",
"version": "1.0.0",
"description": "Bun web server for serving dynamic content to Samsung TVs via SSR and MJPEG streaming",
"scripts": {
"start": "bun run src/server.ts",
"dev": "bun --watch run src/server.ts",
"lint": "oxlint",
"lint:fix": "oxlint --fix",
"fmt": "oxfmt",
"fmt:check": "oxfmt --check"
},
"dependencies": {
"isomorphic-dompurify": "^2.24.0",
"puppeteer": "^24.43.1"
},
"devDependencies": {
"@types/bun": "^1.3.13",
"add": "^2.0.6",
"oxfmt": "^0.49.0",
"oxlint": "^1.64.0",
"typescript": "^6.0.3"
}
}