security: sanitize markdown output and harden unix socket permissions

- Add isomorphic-dompurify to sanitize rendered docs HTML
- Tighten SocketServerJson socket permissions from 777 to 660
- Keep package.json version at 1.1.16

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
2026-07-18 22:41:47 -04:00
parent d1dd40d60a
commit bdaba513a7
4 changed files with 546 additions and 9 deletions
+1
View File
@@ -31,6 +31,7 @@
"express": "^5.2.1",
"express-rate-limit": "^8.5.2",
"extend": "^3.0.2",
"isomorphic-dompurify": "^3.19.0",
"jq-repeat": "^2.2.0",
"jquery": "^4.0.0",
"ldapts": "^8.1.8",