we have no user input validation process right now which could be a security risk when we deploy
users shouldn't be adding a ton of text to the input, so we should enforce additional character limits, type enforcement, etc... possibly with WTForms and/or regex (could help with the isotope formatting for the search bar). I know we have some but to be thorough. then also sanitize input to prevent XSS (use bleach?)
(?) + Flask-WTF for CSRF protection
we have no user input validation process right now which could be a security risk when we deploy
users shouldn't be adding a ton of text to the input, so we should enforce additional character limits, type enforcement, etc... possibly with WTForms and/or regex (could help with the isotope formatting for the search bar). I know we have some but to be thorough. then also sanitize input to prevent XSS (use bleach?)
(?) + Flask-WTF for CSRF protection