interactive-map

The fragment implements a data-driven interactive map viewer and contains no evident malware or data-exfiltration behavior. Its principal security risk is potential DOM XSS when an untrusted map definition supplies content inserted into innerHTML or HTML templates without escaping. The risk depends on who can control the inline map definition; no suspicious domains, IPs, credential targets, or external exfiltration destinations are present. Severity is moderate for deployments that accept untrusted definitions; the supplied fragment also contains an incomplete path-validation expression that would prevent parsing as shown.