vuln-patterns-xss

Detect Cross-Site Scripting (XSS) vulnerabilities in Python web applications by analyzing common vulnerable code patterns. This Skill identifies sources, sinks, and sanitization gaps specific to XSS across HTML rendering and template engines.

Yes, it checks for XSS vulnerabilities in Django and Jinja2 templates by identifying specific vulnerable patterns. It targets unsafe HTML rendering mechanisms like the mark_safe() function and Jinja2 autoescaping issues.

CWE-79 vulnerability detection for frontend assignments works by scanning Python code for direct unsafe DOM manipulations. It identifies specific sinks like direct innerHTML assignments where untrusted user input might be rendered without proper sanitization.

The best way to audit a codebase for unsafe HTML rendering is to use pattern matching against known vulnerable code structures. This Skill systematically checks for instances where user input reaches HTML sinks without sanitization, preventing script execution.

Yes, you can find Mako template XSS issues alongside Django. The Skill analyzes common vulnerable code patterns across multiple Python template engines, including Jinja2, Mako, and Django, to identify contextual sanitization gaps.

Jinja2 autoescaping might trigger an XSS warning if the code explicitly bypasses it or uses direct frontend assignments. The Skill identifies contextual sanitization gaps where user input reaches HTML rendering sinks despite configured template engine protections.