AmirReza Jamali
3e5e135b47
- Add sanitize.ts utility module with sanitizeText(), sanitizeUrl(), and sanitizeHtml() functions - Implement server-side HTML entity escaping and client-side DOMPurify sanitization - Add comprehensive test suite for sanitization functions in lib/__tests__/sanitize.test.ts - Secure marketing pages by sanitizing all CMS data (hero, features, challenges, advantages, footer) - Secure inquiries form by sanitizing field labels, placeholders, and button text - Add SECURITY.md documentation outlining XSS protection measures and best practices - Add USAGE_EXAMPLES.md with detailed examples of sanitization function usage - Add XSS_PROTECTION_SUMMARY.md with implementation overview - Update package.json to include dompurify (^3.3.0) dependency - Protects against common XSS attack vectors including script injection, event handlers, and malicious URLs
25 lines
940 B
TypeScript
25 lines
940 B
TypeScript
import { sanitizeText } from "@/lib/sanitize";
|
|
import { CmsContact } from "@/types/TCms";
|
|
import InquiresForm from "./form";
|
|
|
|
const Inquires = ({ contactData }: { contactData?: CmsContact }) => {
|
|
return (
|
|
<div className="flex flex-col items-center mt-16 px-8 ">
|
|
<div className="lg:w-2/3 m-auto flex flex-col gap-4 mb-12">
|
|
<h2 className="font-bold text-4xl">
|
|
{sanitizeText(contactData?.title) || "Unlock Your Growth Potential"}
|
|
</h2>
|
|
<p className="font-normal text-[16px] text-gray-600">
|
|
{sanitizeText(contactData?.description) ||
|
|
"Register for early access and a free consultation. Let's start winning together."}
|
|
</p>
|
|
</div>
|
|
<section className="border border-gray-300 rounded-4xl w-full lg:max-w-2/3 flex flex-col items-center bg-white">
|
|
<InquiresForm contactData={contactData} />
|
|
</section>
|
|
</div>
|
|
);
|
|
};
|
|
|
|
export default Inquires;
|