HTML and JavaScript Injection in Copy Blocks
Open
bug
- Dominant language
- JavaScript
- Stars
- 45
- Forks
- 59
- Avg merge
- 3d 7h
- Merged PRs (30d)
- 12
Description
The `copy` block uses `innerHTML` with unsanitized user input:
```js
div.innerHTML = `${config[key]}`;
```
Contributor guide
Research direction
Locate the copy block implementation and trace the config[key] value shown in the report. Verify the behavior with an HTML or JavaScript payload, then confirm the fix preserves intended copy content without executing injected markup.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- frontend, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100