XSS mitigation by sanitizing user inputs with bleach

[LorennaCunha]

This solution refers to which of the apps?

A3 - Gossip World

What did you do to mitigate the vulnerability?

I mitigated the XSS vulnerability by sanitizing user inputs across the app. I used the bleach library to clean and remove any potentially dangerous HTML tags and scripts from user-generated content, such as comments and posts. This prevents malicious JavaScript from executing in the browser when user content is displayed, thus securing the app from XSS attacks.

Did you test your changes? What commands did you run?

I tested the changes by trying to reproduce the attack narrative in the setup, by injecting JavaScript in comment, post, and search fields. After implementing the sanitization, I confirmed that the injected scripts were no longer executable and displayed as plain text, mitigating the XSS vulnerability.