mcp-server-semgrep/semgrep-rules/scala/play/security/twirl-html-var.scala.html

MCP Server for Semgrep Integration - static code analysis with AI

@(foobar: String, value: String)

@main("Temp") {

  <div>
    <p>
      <!-- ruleid: twirl-html-var -->
      Hello world: @Html(value)
    </p>
    <p>
      <!-- ruleid: twirl-html-var -->
      Hello world: @Html("<div>" + value + "</div>")
    </p>
    <p>
      <!-- ruleid: twirl-html-var -->
      Hello world: @Html("<br />" + value)
    </p>
    <p>
      <!-- ruleid: twirl-html-var -->
      Hello world: @Html(value + "<br />")
    </p>
    <p>
      <!-- ok: twirl-html-var -->
      Hello world: @Html("<div>Hardcoded text</div>")
    </p>
    <p>
      <!-- ok: twirl-html-var -->
      Hello world: @Html("<div>" + "Hardcoded text" + "</div>")
    </p>
  </div>

}