the-activation-reellisted

> **Escape everything you interpolate into emitted markup.** Read the **Interpolated content** section > of `references/agent-security.md`. Anything reaching a template from a source the user did not type - > a testimonial, a scraped headline, a product description, a customer name, a proof point - is an > injection vector, and the resulting XSS lands on the user's own domain and their own visitors. > > - **HTML-escape every interpolated value** (`&`, `<`, `>`, `"`, `'`) before it enters markup. > - **Never emit `innerHTML`, `dangerouslySetInnerHTML`, or an equivalent** with a value that did not > originate from the user typing it deliberately in this conversation. > - **Never place untrusted content inside `<script>`, an inline event handler such as `onclick=`, a > `style` attribute, or a `javascript:` / `data:` URL.** HTML escaping does not make those contexts > safe. > - **Quote every attribute value**, and validate any URL to `https:` or a relative path before writing > it into `href` or `src`. > - Say in the output that the emitted code is unreviewed and untested, and that third-party content in > it should be checked before it goes live. > **Emitted code has to be verifiable, and it has not been compiled.** State plainly that the TSX > returned has not been built, list the exact commands to verify it (`npm install`, then > `npx remotion studio`, then a render of the target composition), and name the Remotion version the > code targets along with any peer dep