Clean up profile spaces; update gitignore#402
Conversation
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request cleans up several user YAML files by removing unnecessary leading newlines in bio fields, correcting a capitalization error, and updating the .gitignore file. A review comment identifies a potential XSS vulnerability in src/users/kenhorlador.yaml due to the continued use of HTML tags for links, suggesting a full transition to Markdown for improved security and consistency.
| bio: | | ||
|
|
||
| I'm <strong>Ken Horlador</strong> from Camarines Sur, Philippines. I enjoy learning programming languages and libraries/frameworks like <a href="https://reactjs.org/">ReactJS</a> with <a href="https://www.gatsbyjs.com/">GatsbyJS</a> or <a href="https://nextjs.org/">NextJS</a>. I also enjoy wireframing, developing user flows, user interface, user experience and design in general. | ||
| I'm **Ken Horlador** from Camarines Sur, Philippines. I enjoy learning programming languages and libraries/frameworks like <a href="https://reactjs.org/">ReactJS</a> with <a href="https://www.gatsbyjs.com/">GatsbyJS</a> or <a href="https://nextjs.org/">NextJS</a>. I also enjoy wireframing, developing user flows, user interface, user experience and design in general. |
There was a problem hiding this comment.
The use of HTML tags like inside a YAML bio field that is rendered via Nunjucks might lead to XSS vulnerabilities if not properly sanitized. It is safer to use Markdown formatting (as done with the bold text) and ensure the template rendering context handles escaping appropriately.
I'm **Ken Horlador** from Camarines Sur, Philippines. I enjoy learning programming languages and libraries/frameworks like [ReactJS](https://reactjs.org/) with [GatsbyJS](https://www.gatsbyjs.com/) or [NextJS](https://nextjs.org/). I also enjoy wireframing, developing user flows, user interface, user experience and design in general.1 participant
No description provided.