openchat openchat osschat

ChartStyle XSS Protection for Charts

Security Frontend Bug Fix

This update focuses on hardening chart styling against a potential XSS risk. It adds safeguards so injected chart styles only use safe, validated values.

Security

The ChartStyle component now sanitizes chart id and color inputs before generating styles. This helps prevent CSS or HTML injection if these values ever become user-controlled.

Invalid color entries are now skipped, reducing the chance of unsafe or malformed style output.