Skip to content

Cross-Site Scripting (XSS) #1

@sameer6pre

Description

@sameer6pre

The use of 'dangerouslySetInnerHTML' in React can lead to Cross-Site Scripting (XSS) vulnerabilities if the HTML content is not properly sanitized. In this case, the 'comment' variable is directly used without any sanitization, which could allow an attacker to inject malicious scripts.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions