security: sanitize markdown output and reduce PII logging

- Add isomorphic-dompurify to sanitize rendered docs HTML and Terms of Service - Remove addLdapUser full-object logging that included password hashes - Log only error name/message on auth/login failures instead of full LDAP error objects Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-18 22:56:35 -04:00
parent 1b3e842006
commit 07819a6254
6 changed files with 537 additions and 11 deletions
@@ -30,6 +30,7 @@
    "express": "^5.2.1",
    "express-rate-limit": "^8.5.2",
    "extend": "^3.0.2",
+    "isomorphic-dompurify": "^3.19.0",
    "jq-repeat": "^2.2.0",
    "jquery": "^3.7.1",
    "jsonwebtoken": "^9.0.3",