mcp-server-semgrep/semgrep-rules/javascript/fbjs/security/audit/insecure-createnodesfrommarkup.js

MCP Server for Semgrep Integration - static code analysis with AI

function ok1() {
// ok: insecure-createnodesfrommarkup
  createNodesFromMarkup('<div></div', function () {
    handleIt();
  })
}

function bad1(input) {
// ruleid: insecure-createnodesfrommarkup
  createNodesFromMarkup('<div>' + input + '</div', function () {
    handleIt();
  })
}