Update app.py

app.py

@@ -22,7 +22,6 @@ import logging
 import asyncio
 from functools import lru_cache
 import hashlib
-import bleach
 from concurrent.futures import ThreadPoolExecutor
 
 # ========== CONFIGURATION ==========
@@ -148,7 +147,13 @@ def sanitize_input(text: str) -> str:
     """Sanitize user input to prevent XSS and injection attacks."""
     if not text:
         return ""
-    return bleach.clean(text.strip(), tags=[], attributes={}, protocols=[], strip=True)
+    # Basic HTML escaping and removal of potentially dangerous characters
+    text = html.escape(text.strip())
+    # Remove any remaining HTML tags
+    text = re.sub(r'<[^>]*>', '', text)
+    # Remove potentially dangerous characters
+    text = re.sub(r'[^\w\s\-.,!?@#\$%^&*()+=]', '', text)
+    return text
 
 def validate_name(name: str) -> str:
     """Validate name input."""