GrepRules
Sign inPublish rule
Explore/cve-2024-22420-unsanitized-markdown-render-innerhtml

CVE-2024-22420: Unsanitized Markdown Render Innerhtml

Direct assignment of un-sanitized parsed markdown or HTML to innerHTML can lead to DOM-based Cross-Site Scripting (XSS). Use a sanitizer such as DOMPurify or a secure rendering method.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0TS
greprules fetch cve-2024-22420-unsanitized-markdown-render-innerhtml --engine opengrep

Description

Direct assignment of un-sanitized parsed markdown or HTML to innerHTML can lead to DOM-based Cross-Site Scripting (XSS). Use a sanitizer such as DOMPurify or a secure rendering method.

License
Apache-2.0
Source context
Public repository
Source
Provally CVE rule catalog
Validation status
Verified
Quality signals
146 downloads0 direct146 via packs
· 0 stars · Quality score 80How quality works
Included packs
2 packs