Erik Zhang

Results 162 comments of Erik Zhang

Maybe we can use `UnsafeRelaxedJsonEscaping`? https://learn.microsoft.com/en-us/dotnet/standard/serialization/system-text-json/character-encoding#serialize-all-characters

> We tried that and works great. However it allows for XSS Injection and other security problems. Putting strings directly into HTML without processing will always bring security issues. I...