Foliate is really good with the security aspects of rendering ebooks. See the author's foliate-js library project (https://github.com/johnfactotum/foliate-js?tab=readme-ov-fil...).

I've recently written an article about the dangers of ebooks. Maybe it's of interest to some: https://gebir.ge/blog/every-trick-in-the-book/