CVE-2026-50556: Element Agnostic Attribute Sanitization

Validation or sanitization of an HTML attribute without contextual element metadata can lead to schema bypasses. Always ensure attribute validation checks include the tag context, as safety profiles differ significantly (e.g., `href` on `a` versus `href` on `link`).

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0TS
greprules fetch cve-2026-50556-element-agnostic-attribute-sanitization --engine opengrep

Description

Validation or sanitization of an HTML attribute without contextual element metadata can lead to schema bypasses. Always ensure attribute validation checks include the tag context, as safety profiles differ significantly (e.g., `href` on `a` versus `href` on `link`).