Install dompurify and replace the hand-rolled DOM walker sanitizer with DOMPurify.sanitize() configured with the same allowed tags. Handles mutation XSS edge cases the custom version couldn't. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Install dompurify and replace the hand-rolled DOM walker sanitizer with DOMPurify.sanitize() configured with the same allowed tags. Handles mutation XSS edge cases the custom version couldn't. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>