Security Hardening - #53

Merged

ardelato merged 7 commits into

fix/security-hardening

Apr 27, 2026

Commits on Apr 27, 2026

fix(model): add Purify mutator to Alert model
ardelato
committed
f006860
fix(vue): add DOMPurify sanitization to AlertBanner
ardelato
committed
14b57c9
refactor(vue): extract shared escapeHtml helper
ardelato
committed
56649e0
fix(vue): sanitize ReadMore text prop and fix reference bug
ardelato
committed
520cf88
fix(controller): escape user emails in flash messages
ardelato
committed
023d547
fix(config): add tel URI scheme to HTMLPurifier allowlist
ardelato
committed
c95ef22
fix(deps): update axios to fix known CVEs
ardelato
committed
84dbe41