AI-Generated XSS (Cross-Site Scripting) Review Rules
No required blockers for this preset.
caution
64/100
Collect package checksum or signed artifact information.
rules/ai-generated-xss-review-rules · trust review · confidence 83%
Browse the directory
/
Showing 1 resource for "output-encoding"
Saved
/ search · [ ] view density · esc clear input
Active
Adoption queue
Browse adoption queue · balanced
0/1 visible results are ready for staged adoption under this preset.
ready 0caution 1hold 0
Decision confidence
Decision confidence scan · balanced
0/1 results are high-confidence for the selected preset.
high 0medium 1low 0
AI-Generated XSS (Cross-Site Scripting) Review Rules
Address Package integrity before broader rollout.
medium
68/100
Missing: Package integrity
rules/ai-generated-xss-review-rules · trust review
rulesReview firstSource-backedReview firstClaude Code
Source-backed rules for reviewing AI-generated code that renders untrusted data into HTML, JavaScript, URLs, or CSS before merge for cross-site scripting risk, covering context-correct output encoding, dangerous DOM sinks, HTML sanitization, and Content-Security-Policy as defense in depth.
Safety ✓ Privacy ✓