mcp-siber-security-audit/src/fixers/xss-fixer.js

MCP server for security code audit with auto-fix capabilities

const { sanitize } = require('../utils');

class XSSFixer {
  applyFix(content, issue) {
    const lines = content.split('\n');
    const lineIndex = issue.line - 1;
    const line = lines[lineIndex];

    const fixedLine = line.replace('${userInput}', '${sanitize(userInput)}');
    lines[lineIndex] = fixedLine;

    let fixedContent = lines.join('\n');

    if (!fixedContent.includes("const { sanitize } = require('../utils');")) {
      fixedContent = `const { sanitize } = require('../utils');\n${fixedContent}`;
    }

    return {
      fixedContent: fixedContent,
      isFixed: true,
    };
  }
}

module.exports = XSSFixer;