I have tried using 'ajv-errors' which requires 'allErrors: true'. However, I read that using this opens up the code to injection attacts [1].

How can I safely and concisely create custom error messages?

P.S. I have custom error messages for added keywords. I want to cutomise the keywords that are within the parent schema.