CWE-95 + frontend/template XSS precision - #73

Merged

leenk7991 merged 11 commits into

mainfrom

feat/cwe95-xss-sink-precision

Sep 17, 2026

Commits on Aug 19, 2026

CWE-95 + frontend/template XSS precision
leenk7991
committed
acde89a
Fix HTML-only scans so Django |safe rules actually run.

leenk7991
and
cursoragent
committed
03d8a4f

Commits on Aug 20, 2026

Flag vm.runIn* and string timers as CWE-95, not escapeHtml helpers.

leenk7991
and
cursoragent
committed
258b9c0
address comment
leenk7991
committed
c2290eb

Commits on Aug 24, 2026

handle iife and quality comment
leenk7991
committed
78045cb

Commits on Aug 26, 2026

Merge branch 'main' into feat/cwe95-xss-sink-precision

leenk7991
and
cursoragent
committed
f8e0bf9
address comments
leenk7991
committed
c3383dc

Commits on Sep 8, 2026

update django rule pattern and regex and other updates
leenk7991
committed
ee4e724

Commits on Sep 9, 2026

fix: keep PathBuf rebuild walk and pass clippy

leenk7991
and
cursoragent
committed
0f006af

Commits on Sep 13, 2026

add language scopes
leenk7991
committed
1ef0541

Commits on Sep 17, 2026

address comments
leenk7991
committed
ff72b24