Detected directly writing to a Response object from user-defined input. This bypasses any HTML escaping and may expose your application to a Cross-Site-scripting (XSS) vulnerability. Instead, use 'resp.render()' to render safely escaped HTML.

[get-famed[bot]]

🦸‍♀️ Famed Scanner

📝 Description

Detected directly writing to a Response object from user-defined input. This bypasses any HTML escaping and may expose your application to a Cross-Site-scripting (XSS) vulnerability. Instead, use 'resp.render()' to render safely escaped HTML.

📁 Related files

inject.js

This issue was created by famed 🤖

[get-famed[bot]]

🤖 Assignees for issue Detected directly writing to a Response object from user-defined input. This bypasses any HTML escaping and may expose your application to a Cross-Site-scripting (XSS) vulnerability. Instead, use 'resp.render()' to render safely escaped HTML. #22 are now eligible to Get Famed.

❌ Add assignees to track contribution times of the issue 🦸‍♀️🦹️ ✅ Add a single severity (CVSS) label to compute the score 🏷️️

Happy hacking! 🦾💙❤️️