Sanitize username and chat messages using DOMpurify

[VaibhavSaini19]

Although the fields have been sanitized, being a completely client-side code, anyone with a knack of Js knowledge can modify the code and inject malicious script back again.

[s-katte]

Looks good to me.

Could you take a look at this? @sachin2912 @s-katte?

sure

[s-katte]

@VaibhavSaini19, I have gone through docs here, and as you can see, they recommend not to use {SAFE_FOR_TEMPLATES: true} unless we don't have any other options. So, aren't there any options?

[VaibhavSaini19]

@VaibhavSaini19, I have gone through docs here, and as you can see, they recommend not to use {SAFE_FOR_TEMPLATES: true} unless we don't have any other options. So, aren't there any options?

Since we are using it to sanitizing the input given by the user instead of a custom template string, it is safe to use that attribute here

[gridhead]

@s-katte, please state if you find https://github.com/astrosonic/sanctuary/pull/64#issuecomment-736983741 satisfactory, so that we can go ahead and merge this one as well.