fix(notifications): sanitize notification text by removing unknown tags so attribute noise doesn’t appear in rendered messages

This commit is contained in:
tibssy
2026-02-17 15:21:14 +00:00
parent c2629c3c2f
commit 604f709ad6
+2 -2
View File
@@ -823,8 +823,8 @@ Singleton {
// Preserve valid HTML tag
result += part;
} else {
// Unknown tag: strip brackets and escape inner content
result += escapeHtml(content);
// Unknown tag: drop tag without leaking attributes
result += "";
}
} else {
// Normal text: escape everything