From 6ea32d9719c9f00f626ba7de7783e738dd2f26e0 Mon Sep 17 00:00:00 2001 From: Marcel Bokhorst Date: Mon, 17 Oct 2022 22:01:35 +0200 Subject: [PATCH] Updated FAQ --- FAQ.md | 1 + 1 file changed, 1 insertion(+) diff --git a/FAQ.md b/FAQ.md index 2d9a98e83c..903a252d7c 100644 --- a/FAQ.md +++ b/FAQ.md @@ -4996,6 +4996,7 @@ Password protected text is encrypted with AES/GCM with a 256 bits key derived wi With a sufficiently long/complex password, which is communicated to the recipient securely, this is considered safe in 2022 and for the foreseeable future. The maximum message text is 1,500 characters, which includes HTML formatting tags. +Images will be replaced with place holders to reduce the content size. Cross-site scripting (XSS) is prevented by using [DOMPurify](https://github.com/cure53/DOMPurify) (Apache License Version 2.0).