fix(files): Apply HTML escaping to all user-controlled input before сoncatenating it into HTML#1768

Open

JuliaKirschenheuter wants to merge 1 commit intomainfrom

fix/Stored-HTML-Injection-in-Nextcloud-Notes-Markdown-Preview-via-Unescaped-Image-Alt-Text

Commits on Mar 4, 2026

fix(files): Apply HTML escaping to all user-controlled input before concatenating it into HTML
JuliaKirschenheuter
committed