server-side-rendering
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyreferences/ejs-template-examples.md
LOWAnomalyLOW
references/ejs-template-examples.md
The code is a normal EJS template set with a potential XSS risk caused by rendering body and post.content unescaped. These values should be sanitized with a strict HTML allowlist before rendering, or emitted with escaped EJS syntax when raw HTML is not required. No malicious supply-chain behavior is evident.
Confidence: 98%Severity: 55%
Audit Metadata