Conversation
- Add missing emits declarations for Vue 3 compatibility - Add default prop values and type annotations - Fix computed property side effects (refactored to avoid mutations) - Replace deprecated Vuetify 2 patterns (v-list-item-icon, transition prop) - Replace deprecated Vue 2 API ($delete) with Vue 3 equivalent - Fix template shadow variable names - Add eslint-disable comments for intentional console.log/error usage - Update eslint.yml workflow to enforce 0 warnings for all packages - Configure VS Code for auto-format and lint on save 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <[email protected]>
| </v-list-item-title> | ||
| <div v-html="sanitizeNews(news.body)"></div> | ||
| <!-- eslint-disable-next-line vue/no-v-html --> | ||
| <div v-html="sanitizeNews(newsItem.body)"></div> |
There was a problem hiding this comment.
Using v-html in Vue templates can lead to XSS attacks - high severity
Using v-html can allow attacks to insert HTML into your page, or even scripts if you don't have strict CSP rules set up. Worst case, it could be used as a way to start a social engineering attack or start an account takeover attack.
Remediation: Avoid v-html usage. Ignore this issue only if the HTML content you feed into it is static. Defend in depth against XSS attacks by using a strict CSP policy. If you must use HTML, sanitize it with a library such as DOMPurify.
View details in Aikido Security
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #2682 +/- ##
=======================================
Coverage 79.25% 79.25%
=======================================
Files 662 662
Lines 52419 52417 -2
Branches 734 734
=======================================
+ Hits 41544 41545 +1
+ Misses 10795 10792 -3
Partials 80 80
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
🤖 Generated with Claude Code