Security - XSS validation in Posts

[weaponsforge]

• Check Firebase-only solutions (Firestore Rules) for validating XSS attacks when creating/editing Posts
• Other possible solutions are:
  • do server-side validation outside Firebase (i.e., Node or PHP backend)
  • use Markdown in Posts, and allow only Markdown content to allow simpler Firebase-only validation: #135