feat: add BlogBodySanitizer for HTML sanitization on article save
- Implemented BlogBodySanitizer to clean HTML content before saving articles, ensuring security against XSS attacks. - Added tests for BlogBodySanitizer to verify that unsafe tags and attributes are stripped from the content. - Introduced ApiLeastPrivilegeTest to ensure that unauthorized users cannot access sensitive API routes, maintaining strict access control.
This commit is contained in:
@@ -10,7 +10,7 @@ vi.mock('../lib/api', () => ({
|
||||
vi.mock('sonner', () => ({ toast: { success: vi.fn(), error: vi.fn() } }));
|
||||
vi.mock('../hooks/usePermissions', () => ({ usePermissions: () => ({ can: () => true }) }));
|
||||
|
||||
import { Routes, Route } from 'react-router-dom';
|
||||
import { Routes, Route } from 'react-router';
|
||||
import { api } from '../lib/api';
|
||||
import ResourceDetailPage from './ResourceDetailPage';
|
||||
|
||||
|
||||
Reference in New Issue
Block a user