Zac Poorman

added sanitizing for file input

11

This change is [](https://reviewable.io/reviews/mongo-express/mongo-express/981) - - - Fix #980 Let me know if we need to do something else --- Additional changes: - replace `escapeHtml.js` with `html-entities`

Vulnerability Scanner Found unsanitized input in collection.js

3

Ran a new scan and found an XSS attack vector, think I have a solution will create PR 

New version needed on NPM

1

We need a new version on npm with the resolved swig-templates to free-swig. I don't know what that takes to do, but I am more than happy to help with...

https://security.snyk.io/vuln/SNYK-JS-HANDLEBARS-1056767 added an updated version of handlebars to patch the issue disclosed here.

Patch for DOMXSS

3

**Note:** Filling out this template is required. Any pull request that does not include enough information to be reviewed in a timely manner may be closed at the maintainer's discretion....