XSS vulnerabilities issue
In the following HTL code, where I'm using a method that returns a JSON string, I am concerned that it might cause XSS vulnerabilities when the data is rendered in the HTML:<sly data-sly-use.obj="com.components.models.class">${ obj.method @ context= 'unsafe'}</sly>Also, in my JavaScript code, I am accessing the DOM and parsing the JSON data, which I then manipulate and render back into the DOM. I’m worried that this could lead to XSS vulnerabilities as well:const Script = document.querySelector(' script');const data = JSON.parse(Script.innerHTML.trim()); Script.innerHTML = JSON.stringify(data, null, 2).replace(/},\s*{/g, '},\n{').replace(/\[\s*{/g, '[\n{').replace(/}\s*\]/g, '}\n]');How can I fix both of these to prevent XSS vulnerabilities?
