basic understanding of XSSfamiliarity with Reactknowledge of input sanitization
初心者向け度初回貢献者にどれだけ取り組みやすいかを 1-100 で推定したスコアです。
30
調査方針
Investigate the UI components that render user input (e.g., chat messages, usernames) and check for missing output sanitization. Look for direct innerHTML usage or unsafe React dangerouslySetInnerHTML. Identify which inputs are vulnerable using the screenshot as reference. After locating the vulnerable code, apply a sanitization library like DOMPurify or ensure proper HTML escaping. Test with common XSS payloads to confirm the fix works.
