Skip to content

Prevent DOM XSS in port-scan results - #2

Closed
technoporada with github-agentic-autofix[bot] wants to merge 4 commits into
mainfrom
agentic-autofix/fix-code-scanning-alerts
Closed

technoporada with github-agentic-autofix[bot] wants to merge 4 commits into
mainfrom
agentic-autofix/fix-code-scanning-alerts

Conversation

@github-agentic-autofix

@github-agentic-autofix github-agentic-autofix AI commented Oct 28, 2026 •

Copy link
Copy Markdown

The port-scan target came from a user-editable input and was interpolated into HTML. Render it as text instead.

  • Change: Populate the section heading with textContent after inserting the result markup:
    results.innerHTML = html;
    results.querySelector('.section-title').textContent = `Port Scan: ${target}`;

Co-authored-by: technoporada <171401859+technoporada@users.noreply.github.com>
@github-agentic-autofix github-agentic-autofix AI changed the title [WIP] Fix code scanning alert #7 Prevent DOM XSS in port-scan results Oct 28, 2026
GitHub Agentic Autofix finished work on behalf of technoporada October 28, 2026 05:44
Co-authored-by: technoporada <171401859+technoporada@users.noreply.github.com>

@technoporada technoporada left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

trzeba poprawic

@technoporada
technoporada deleted the agentic-autofix/fix-code-scanning-alerts branch October 28, 2026 06:07

@technoporada technoporada left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

di

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants