CH-FSEC-004XSS prevention: user input never rendered as raw HTML (dangerouslySetInnerHTML or equivalent guarded)
Currently v3.42.0. To cite a stable, pinned form of this page, use /standard/versions/3.42.0/CH-FSEC-004.
- Area
- FSEC
- Severity
- critical
- Detection
- llm
- Corpus coverage
- corpus can measure detection
Corpus coverage measured as of 9/2/2026 (commit 2c57d95600).