fix(security): harden sanitize, flatten, redaction, signature validation, CSP, proxies and CI

src/js/utils/translation-html.ts

@@ -0,0 +1,7 @@
+import DOMPurify from 'dompurify';
+
+const ALLOWED_TAGS = ['br', 'strong', 'em'];
+
+export function sanitizeTranslationHtml(html: string): string {
+  return DOMPurify.sanitize(html, { ALLOWED_TAGS, ALLOWED_ATTR: [] });
+}