Fix code scanning alert no. 20: Client-side cross-site scripting

[cooljeanius]

Fixes https://github.com/cooljeanius/ghidra/security/code-scanning/20

To fix the cross-site scripting vulnerability, we need to sanitize the user-provided input before assigning it to this.notes and subsequently setting it as innerHTML. The DOMPurify library, which is already included in the script, can be used for this purpose. This ensures that any potentially harmful scripts are removed from the input.

• General Fix: Sanitize the user input using DOMPurify before assigning it to this.notes and setting it as innerHTML.
• Detailed Fix: Modify the code on line 222 to use DOMPurify.sanitize(argv[1]) instead of directly assigning argv[1] to this.notes.
• Specific Changes: Update the relevant line in the Dz.onmessage function to include the sanitization step.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[cooljeanius]

ok