Unsafe HTML In Template (ARCH9134)
Esta página aún no está disponible en tu idioma.
Key swift.security.unsafe-html-in-template · Severity warning · Category security · CWE CWE-79
Flags #unsafeHTML / raw HTML tags in Leaf templates fed from variables, and loadHTMLString with a template built from data.
Incorrect
Section titled “Incorrect”#unsafeHTML(user.bio)Correct
Section titled “Correct”#(user.bio)Let the engine escape; mark trusted fragments explicitly and never user data.