Émile Ré e24813202b Fix XSS in cookie banner translation rendering ...

Validate translation string values server-side with NoHTML() and
MaxLen(2000) to reject HTML in the translations JSON blob. On the
client side, escape user-provided template text before innerHTML
injection in banner_description and placeholder_text paths.

Signed-off-by: Émile Ré <emile@getprobo.com>

2026-04-24 12:18:11 +04:00

..

anonymize.go

Add cookie banner public API endpoints

2026-04-15 10:21:00 +04:00

defaults.go

Add per-category translations and improve preferences panel preview

2026-04-24 12:18:11 +04:00

errors.go

Add slug to cookie categories for stable consent identifiers

2026-04-24 12:18:10 +04:00

service.go

Fix XSS in cookie banner translation rendering

2026-04-24 12:18:11 +04:00