mcp-server-semgrep/semgrep-rules/go/lang/security/audit/xss/no-interpolation-js-template-string.html

MCP Server for Semgrep Integration - static code analysis with AI

<h4>From: {{.from_email}}</h4>
<h4>To: {{.recipient}}</h4>
<h4>Subject: {{.subject}}</h4>
<div class="email" style="display: block;">
    <!-- ok:no-interpolation-js-template-string -->
    {{.message}}
</div>
<div class="email-text" style="display: none;">
    <!-- ok:no-interpolation-js-template-string -->
    <pre>{{.body}}</pre>
    <a href="https://example.com/">
        <h2 class="upper">
            <!-- ok:no-interpolation-js-template-string -->
            {{.link_text}}
        </h2>
    </a>
</div>
<hr>

<script>
// ruleid:no-interpolation-js-template-string
var x = `hello {{.recipient}}`;
</script>