From 88eacfb54bec716566568a9fb1879c63fe39bfef Mon Sep 17 00:00:00 2001
From: scorpion7slayer <120050493+scorpion7slayer@users.noreply.github.com>
Date: Sun, 8 Mar 2026 03:48:59 +0100
Subject: [PATCH] Potential fix for code scanning alert no. 1: Incomplete
 multi-character sanitization

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 src/components/AppChangelog.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/components/AppChangelog.tsx b/src/components/AppChangelog.tsx
index b407228..361a87f 100644
--- a/src/components/AppChangelog.tsx
+++ b/src/components/AppChangelog.tsx
@@ -197,7 +197,7 @@ const AppChangelog: React.FC = () => {
                       </p>
                       {entry.description && (
                         <p className="text-xs mt-1 line-clamp-2" style={{ color: 'var(--text-secondary)' }}>
-                          {entry.description.replace(/<[^>]*>/g, '').substring(0, 200)}
+                          {DOMPurify.sanitize(entry.description, { ALLOWED_TAGS: [], ALLOWED_ATTR: [] }).substring(0, 200)}
                         </p>
                       )}
                       <div className="flex items-center gap-2 mt-1.5 text-xs" style={{ color: 'var(--text-tertiary)' }}>