remove HTML tags from username

README.md

@@ -41,6 +41,7 @@ This app uses Web RTC to stream a desktop inside of a docker container. This is
 - Ignore duplicate notify bars.
 - No pointer events for notify bars.
 - Disable debug mode by default.
+- Remove HTML tags from user name.
 
 # Getting started & FAQ
 

client/src/store/user.ts

@@ -48,6 +48,11 @@ export const mutations = mutationTree(state, {
     state.id = id
   },
   addMember(state, member: Member) {
+    // remove html tags
+    let tmp = document.createElement("div");
+    tmp.innerHTML = member.displayname;
+    member.displayname = tmp.textContent || tmp.innerText || "";
+
     state.members = {
       ...state.members,
       [member.id]: {