T09 · Insecure Skill Coding Practices
Warning
- Location
example/code_flow_graph.html:441- Finding
Stored HTML Injection in the Generated Code Graph Viewer
- Content
View full analysis
' + d.navLabel + '' + (d.navSub || '') + ''; item.addEventListener('click', function() { switchDiagram(key); }); navList.appendChild(item); }); function renderAttrHtml(a, isChild, parentHasChildren) { var cls = 'attr' + (isChild ? ' attr-child' : ''); var valHtml = a.val ? '' + a.val + '' : ''; var prefix = isChild ? '▸' : ''; return '' + prefix + '' + a.name + '' + valHtml + ''; } function switchDiagram(key) { if (currentDiagramKey === key) return; currentDiagramKey = key; var d = DIAGRAMS[key]; NODES = d.NODES; CONNECTIONS = d.CONNECTIONS; GROUPS = d.GROUPS; document.getElementById('diagramTitle').textContent = d.title; document.getElementById('diagramSub').textContent = d.sub || ''; document.querySelectorAll('.nav-item').forEach(function(el) { el.classList.toggle('active', el.dataset.diagram === key); }); var children = Array.from(canvas.children); children.forEach(function(ch) { if (ch !== svg) canvas.removeChild(ch); }); svg.innerHTML = ''; attrElements = {}; nodeElements = {}; nodePositions = {}; groupElements = {}; connData = []; selectedAttr = null; dragState = null; groupDragState = null; attrSigMap = {}; attrDescMap = {}; attrDetailMap = {}; attrIOMap = {}; attrCallChainMap = {}; attrFieldDetailMap = {}; undoStack = []; closeDetailPanel(); var s ...[truncated 5483 chars]- Remediation
View remediation