OpenWebF Security: XSS & Input Sanitization

Instructions

1. Identify sources of untrusted input (UGC, remote content, query params).
2. Look for unsafe HTML string rendering patterns and missing sanitization.
3. Recommend explicit sanitization and input validation strategies.
4. Use MCP docs (“Security > Prevent XSS / Sanitize HTML / Validate Input”) to anchor recommendations.
5. Provide fixes as minimal, concrete suggestions; do not modify files by default.

More:

• reference.md
• doc-queries.md
• examples.md