XSS Prevention

[danny-avila]

Hi @ozgrozer 👋

Great job on this. I've been working on something similar but found the choice to use iframe not very sensitive to security.

Any thoughts on how the current code could mitigate XSS?

[danny-avila]

In a more "nefarious" example, and just through prompting, I can "override" the entire app

[ozgrozer]

Try this commit. It should prevent XSS.