Rotimi Best 900f5ec129 fix: critical SVG XSS vulnerability in file uploads ...

- Add comprehensive file type validation to prevent SVG uploads
- Update upload widgets to restrict file types at input level
- Enhanced HTML sanitization to block SVG tags and data URLs
- Create centralized file validation utilities with shared constants
- Add client-side and server-side protection against malicious uploads

Security Impact:
- Prevents stored XSS attacks through malicious SVG profile uploads
- Blocks execution of JavaScript embedded in SVG files
- Enforces whitelist of safe image formats (JPEG, PNG, GIF, WebP)
- Provides defense-in-depth protection across all upload components

Fixes reported vulnerability in profile image upload functionality.

2025-12-03 11:25:00 +01:00

..

api

chore: more email validation

2025-12-03 07:31:35 +01:00

classroomio-com

fix: critical SVG XSS vulnerability in file uploads

2025-12-03 11:25:00 +01:00

course-app

chore: vercel builds failing for dashboard and docs (#576)

2025-09-28 20:57:45 +01:00

dashboard

fix: critical SVG XSS vulnerability in file uploads

2025-12-03 11:25:00 +01:00

docs

feat: optimize docker compose for dashboard and api (#578)

2025-10-11 13:27:50 +01:00