sanitizeInput method

String sanitizeInput(
  1. String input
)

Sanitize input data

Implementation

String sanitizeInput(String input) {
  try {
    // Remove script tags and javascript: protocol
    String sanitized = input
        .replaceAll(
          RegExp(r'<script[^>]*>.*?</script>', caseSensitive: false),
          '',
        )
        .replaceAll(RegExp(r'javascript:', caseSensitive: false), '')
        .replaceAll(RegExp(r'<[^>]*>'), '');

    return sanitized;
  } catch (e) {
    _logSecurityEvent('Input sanitization failed: $e', LogLevel.error);
    return input; // Return original if sanitization fails
  }
}