[P1-FE-19] Audit v-html usages and sanitize user-supplied HTML

[parth0025]

Audit reference: P1-FE-19
Priority: High
Effort: M

Description

24 v-html usages across 16 files. Wrap any user-supplied content with DOMPurify; convert to bound text where possible. Comment.vue has 4 — start there.

Acceptance criteria

• Every v-html sourced from user input is sanitized via DOMPurify.
• A test XSS payload (e.g. <img src=x onerror=alert(1)>) is rendered as text or escaped, not executed.
• List of remaining safe v-html usages documented inline with a comment explaining the source is trusted.