Erik Zhang
Results
162
comments of
Erik Zhang
Maybe we can use `UnsafeRelaxedJsonEscaping`? https://learn.microsoft.com/en-us/dotnet/standard/serialization/system-text-json/character-encoding#serialize-all-characters
> We tried that and works great. However it allows for XSS Injection and other security problems. Putting strings directly into HTML without processing will always bring security issues. I...