689a143

fix(security): sanitizeHtml now drops SCRIPT/STYLE/IFRAME/SVG/FORM/etc subtrees entirely (was dead code - unwrap leaked script content as text and nested <script> survived); re-walk children moved by unwrap so nested dangerous tags cannot survive

2026-08-04T12:00:11+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>