mcp-server-semgrep/semgrep-rules/javascript/audit/detect-replaceall-sanitization.ts

MCP Server for Semgrep Integration - static code analysis with AI

function encodeProductDescription (tableData: any[]) {
  for (let i = 0; i < tableData.length; i++) {
    // ruleid: detect-replaceall-sanitization
    tableData[i].description = tableData[i].description.replaceAll('<', '&lt;').replaceAll('>', '&gt;')

    // ok
    tableData[i].description = tableData[i].description.replaceAll('<', 'left angle bracket')
  }
}