Client_DOM_XSS @ /New Text Document.html

[margaritalm]

Checkmarx (SAST): Client_DOM_XSS
Security Issue: Read More about Client_DOM_XSS
Checkmarx Project: margaritalm/BookStore_Small_CLI_small
Repository URL: https://github.com/margaritalm/BookStore_Small_CLI_small
Branch: master
Scan ID: 79dde67e-447e-480d-9f9e-f0bfb2e3e6f8

---

The method embeds untrusted data in generated output with write, at line 9 of /New Text Document.html. This untrusted data is embedded into the output without proper sanitization or encoding, enabling an attacker to inject malicious code into the generated web-page.

Result #1:
Severity: HIGH
State: TO_VERIFY
Status: RECURRENT
Attack Vector:

    1. substring: [/New Text Document.html[9,30]](https://github.com/margaritalm/BookStore_Small_CLI_small/blob/master/New Text Document.html#L9)
    2. write: [/New Text Document.html[9,11]](https://github.com/margaritalm/BookStore_Small_CLI_small/blob/master/New Text Document.html#L9)
    Review result in Checkmarx One: Client_DOM_XSS