Replace regex-based stripScriptTags with isomorphic-dompurify: - Whitelist-based HTML sanitization prevents XSS bypasses - Removes scripts, event handlers, and dangerous attributes - Preserves data: URIs for inlined CSS/images - Maintains complete document structure for Tizen TVs Also updates: - Data flow diagram comments (SEC 19) - Modification guide comments - Dependencies (isomorphic-dompurify ^2.36.0)
25 lines
617 B
JSON
25 lines
617 B
JSON
{
|
|
"name": "samsung-tv-server",
|
|
"version": "1.0.0",
|
|
"description": "Bun web server for serving dynamic content to Samsung TVs via SSR and MJPEG streaming",
|
|
"scripts": {
|
|
"start": "bun run src/server.ts",
|
|
"dev": "bun --watch run src/server.ts",
|
|
"lint": "oxlint",
|
|
"lint:fix": "oxlint --fix",
|
|
"fmt": "oxfmt",
|
|
"fmt:check": "oxfmt --check"
|
|
},
|
|
"dependencies": {
|
|
"isomorphic-dompurify": "^2.24.0",
|
|
"puppeteer": "^24.43.1"
|
|
},
|
|
"devDependencies": {
|
|
"@types/bun": "^1.3.13",
|
|
"add": "^2.0.6",
|
|
"oxfmt": "^0.49.0",
|
|
"oxlint": "^1.64.0",
|
|
"typescript": "^6.0.3"
|
|
}
|
|
}
|