upleveled / security-vulnerability-examples-next-js-postgres

Home Page:https://vuln-examples-next-postgres-jose.vercel.app/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add XSS example of insecure URL in database

dschwarz91 opened this issue · comments

In React it's not secure to use untrusted input in the href attribute of anchor elements (explanation, CodeSandbox, official docs showing deprecation)

Create an additional example showing a new blog_posts.url field.

This could also be additionally connected with allowing users to create new blog_posts records via: