Commit Summary: - Title: Medienpool: Fehlendes Escaping ergänzt (#6375) - Author: gharlan - Date: 13 hours ago - Files Changed: 3 files, with 11 additions and 11 deletions Key Changes: - Service Media Extensions: - Previous: Direct usage of in error messages. - Current: Escape and blocked extensions using . - Media Type Validation: - Previous: Direct use of in error messages. - Current: Escapes file path and MIME type using . Security Fix: - The commit addresses potential Cross-Site Scripting (XSS) vulnerabilities by ensuring all user inputs/output (including extensions, MIME types, and error messages) are properly escaped to prevent injection attacks. Code Snippets: - Escaping in : - Escaping in MIME type checks: