All rules →
Rules / JavaScript / TypeScript
SHIELD-JS-004

Cross-Site Scripting (XSS) via document.write

highJavaScript / TypeScriptCWE-79CVSS 7.4

What it detects

document.write with user input can allow script injection.

How to fix

Avoid document.write; use DOM manipulation methods instead.

Scan your repo freeFull documentation
Back to all rules
SHIELD-JS-004: Cross-Site Scripting (XSS) via document.write — Zennoxa Shield