fix(toast): native gea refactor with manual HTML escaping for XSS - #9

Open

dgknbtl wants to merge 4 commits into

dashersw:mainfrom

dgknbtl:fix/toast-xss

Commits on Mar 30, 2026

fix(toast): prevent XSS by using textContent instead of innerHTML

dgknbtl
authored and
dashersw
committed
9296523
refactor(toast): convert to native Gea component for inherent XSS protection

dgknbtl
authored and
dashersw
committed
693a63f
fix(toast): implement manual HTML escaping for native Gea component to prevent XSS

dgknbtl
authored and
dashersw
committed
2d8df8d
test(showcase): re-add XSS Test button to Toast section

dgknbtl
authored and
dashersw
committed
596a61f