Enhancement Request: Add sanitize-html

<h2>Enhancement Request: Add sanitize-html</h2>

<h3>📌 Description</h3>
<p>
Currently, user inputs (bio, username, query) are stored without sanitization. 
This can lead to XSS attacks if malicious HTML/JS is submitted. 
We will use <b>sanitize-html</b> to clean inputs before saving to the database.
</p>

<h3>🛠 Middleware</h3>
<ul>
  <li><b>sanitize-html</b></li>
</ul>

<h3>🚀 Implementation</h3>
<ol>
  <li>Install: <code>npm install sanitize-html</code></li>
  <li>Apply sanitization on text fields:
    <pre><code>
import sanitizeHtml from "sanitize-html";
const cleanBio = sanitizeHtml(req.body.bio, {
  allowedTags: [],
  allowedAttributes: {}
});
    </code></pre>
  </li>
  <li>Use cleaned values before saving in DB.</li>
</ol>

<h3>✅ Expected Outcome</h3>
<ul>
  <li>Prevent XSS attacks.</li>
  <li>Only safe and clean text stored in DB.</li>
</ul>


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Enhancement Request: Add sanitize-html #1233