Stefan-Sanger
ff07fa5621
Addresses PERFORMANCE-FINDINGS #3, #7, #8: - Parameterize GET /groupchats query with $n placeholders and parseInt validation to close SQL injection and restore pg prepared-statement cache. - Fix xmlEscape: use real regexes (& first) instead of no-op string patterns. - Replace deprecated new Buffer() with Buffer.from() for Basic auth header. Part-of: <http://gitlab.vnc.biz/uxf/prosody-muc-rest/-/merge_requests/3>