Framework-Specific DOM XSS

Detects the use of dangerous API methods in modern frontend frameworks (React, Vue, Angular) that can lead to Cross-Site Scripting (XSS).

zakirkun ca6269a 2 files · 1.5 KB Updated

File contents

Framework-Specific DOM XSS

Overview

Detects the use of dangerous API methods in modern frontend frameworks (React, Vue, Angular) that can lead to Cross-Site Scripting (XSS).

Remediation

Avoid using raw HTML injection APIs. If inevitable, sanitize input using a library like DOMPurify.

zakirkun/ice-tea/tree/main/skills/web/dom-xss-frameworks commit ca6269aec1

Frequently asked questions

npx skillmds@latest add zakirkun/framework-specific-dom-xss