3 ms·
* Sanitize inputs. * Don't build HTML by interpolating arbitrary strings whose content you don't know 100% in advance. Actually, avoid interpolating at all if
by quectophoton 2y ago
* Sanitize inputs.
* Don't build HTML by interpolating arbitrary strings whose content you don't know 100% in advance. Actually, avoid interpolating at all if you can use a builder that takes care of all the escaping for you.
* Double-check that those `/getFeed?url=` and `/fetchArticleText?url=` (and any other similar stuff) don't recursively fetch URLs pointing to themselves or to the same domain they're being hosted at. And then triple-check again.