mirror of
https://github.com/CHOMPStation2/CHOMPStation2.git
synced 2025-12-11 10:43:20 +00:00
Double quotes will no longer break the json nanoui uses to display the data. This fix removes the ability to use html and javascript (exploitable for nefarious reasons) Specifying exactly what we want instead of assigning nanoui_data["exploits"] = L.fields which passes by refernce instead of by value. It allows us to also sanitize the input so everything that gets displayed in nanoui doesn't have html