Revert "Staging to Production"

[jdonis]

Reverts #1456

To fix the problem, we need to ensure that the imageBase value is properly sanitized before it is used in the src attribute of the img tag. This can be achieved by validating that the imageBase is a well-formed URL and does not contain any malicious content.

1. Import a well-known library for URL validation, such as validator.
2. Validate the imageBase value before using it in the src attribute.
3. If the imageBase value is not valid, use a default safe value or handle the error appropriately.

To fix the problem, we need to ensure that the imageBase value is properly sanitized before being used in the src attribute of the img tag. This can be achieved by validating that imageBase is a safe URL. We can use a well-known library like DOMPurify to sanitize the URL.

1. Install the DOMPurify library.
2. Import DOMPurify in the relevant file.
3. Use DOMPurify to sanitize the imageBase value before concatenating it with winner.image_path.

To fix the problem, we need to ensure that the input values are properly sanitized before being used to set HTML content. Instead of using the html() method, we should use the text() method, which sets the text content of the selected elements and automatically escapes any HTML characters.

• Replace the html() method with the text() method to prevent the input from being interpreted as HTML.
• This change should be made on lines 21 and 24 in the set_custom_url_example function.

To fix the problem, we need to ensure that any user input is properly escaped before being inserted into the DOM. This can be achieved by using text insertion methods that automatically escape HTML, such as text() instead of html(). This change will prevent any HTML tags in the user input from being interpreted as actual HTML, thereby mitigating the XSS risk.

We will replace the html() method with the text() method on lines 21 and 24 in the set_custom_url_example function. This ensures that the user input is treated as plain text and not as HTML.