ralksta 6c20218369 security: fix XSS in map popups, refactor HeroTextContent, add evict test ...

- escapeHtml() in MapView.tsx sanitises city/country/url/name before HTML injection
- HeroTextContent extracted to top-level component with explicit props (was nested inside async Server Component)
- rate-limit.test.ts: add evictIfFull stress test (6/6 pass)

2026-03-13 12:52:09 +01:00

4.6 KiB

Raw Blame History

View Raw