V-Html Raw Rendering (ARCH3325)
Ce contenu n’est pas encore disponible dans votre langue.
Key typescript.vue.v-html · Severity error · Category security
Vue: flags v-html, which renders its value as raw HTML. Anything reaching it from outside the codebase is executed - stored XSS.
Incorrect
Section titled “Incorrect”<div v-html="comment.body"></div>Correct
Section titled “Correct”<div>{{ comment.body }}</div><!-- or render a sanitised value: v-html="sanitize(comment.body)" -->