Devin AI ff98f2a878 fix: Add XSS protection to flow visualization (issue #4326) ...

- Add DOMPurify CDN to HTML template for sanitizing HTML content
- Add escapeHtml helper function to escape user-controlled text
- Add sanitizeHtml function using DOMPurify with allowed tags/attributes
- Apply sanitization to drawer content before setting innerHTML
- Escape user-controlled values in renderTriggerCondition, renderConditionTree, and renderMetadata methods
- Add tests to verify XSS protection is in place

Co-Authored-By: João <joao@crewai.com>

2026-02-01 13:10:35 +00:00

..

crewai

fix: Add XSS protection to flow visualization (issue #4326)

2026-02-01 13:10:35 +00:00

crewai-files

feat: bump versions to 1.9.3 (#4316)

2026-01-30 14:24:25 -08:00

crewai-tools

feat: bump versions to 1.9.3 (#4316)

2026-01-30 14:24:25 -08:00

devtools

feat: bump versions to 1.9.3 (#4316)

2026-01-30 14:24:25 -08:00