V-Html Raw Rendering (ARCH3325)
Dieser Inhalt ist noch nicht in deiner Sprache verfügbar.
Key typescript.vue.v-html · Severity error · Category security
Vue: flags v-html, which renders its value as raw HTML. Anything reaching it from outside the codebase is executed - stored XSS.
Incorrect
Section titled “Incorrect”<div v-html="comment.body"></div>Correct
Section titled “Correct”<div>{{ comment.body }}</div><!-- or render a sanitised value: v-html="sanitize(comment.body)" -->