semgrep-docs
semgrep-docs copied to clipboard
Suggestion: Another XSS vector
I was reading the documentation provided here and I noted that there was something missing in the XSS prevention documentation: Template strings.
As noted here, template strings can introduce an XSS vector in Django, it also might be a good ideia to add a static code analysis rule for that, but I'm not sure if Semgrep already has this rule implemented.
Thank you @wh1t3h47!
Internal issue tracking number MKT-467.