frontend-mobile-security-xss-scan

Run static analysis that flags dangerous patterns like innerHTML, outerHTML, document.write, and insertAdjacentHTML when combined with user-controlled input. Each finding includes the file, line number, severity, and a fix recommendation such as using textContent or DOMPurify sanitization.

Sanitize the HTML with DOMPurify before passing it to dangerouslySetInnerHTML, for example DOMPurify.sanitize(html) inside the __html property. Where possible, avoid the API entirely and render plain text instead.

Yes, it includes framework-specific detection for Vue v-html directives that render raw HTML and notes Angular's built-in sanitization. React and vanilla JavaScript patterns receive the most detailed coverage.

The skill recommends eslint-plugin-security for lint-time detection and Semgrep with the p/xss ruleset for pattern-based scanning. These integrate into CI pipelines alongside the custom scanner logic.

Static pattern matching can miss data-flow-dependent vulnerabilities where tainted input crosses multiple functions, and it may produce false positives when sanitization happens elsewhere. It detects user input via heuristics like props, state, and query keywords rather than full taint tracking.