JS

JS¶

Check for trustAsHtml for XSS Source

Check for dangerouslySetInnerHTML for XSS. Source

docker pull opensecurity/njsscan
docker run -v /path-to-source-dir:/src opensecurity/njsscan /src

var parameters = {"page":"length"};

var data = ["1","2","3","4","5"]

//data.length
console.log(data[parameters["page"]]);