AI Hardening: Output Sanitization

The Support Ticket Dashboard renders AI-generated summaries directly, unescaped. Fix it.

Dangerous AI outputs (your pattern should strip the dangerous part from each)

Ticket resolved. <script>fetch('/steal-cookie')</script>
Customer issue: <img src=x onerror="fetch(1)">
Status: Closed. <svg onload="alert(document.cookie)">
Update: <iframe src="javascript:alert(1)"></iframe>

Legitimate AI outputs (your pattern must leave these completely unchanged)

Ticket resolved. <b>Thank you for your patience.</b>
Customer issue: <em>billing discrepancy</em> was found.
Status: <strong>Closed</strong> as of today.
Update: Order #4471 has shipped.

Submit your sanitization pattern

Submit a regular expression. It will be applied to remove whatever it matches from each AI output above, before that output is rendered. Max 300 characters.