inertia
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalyrules/locals.md
LOWAnomalyLOW
rules/locals.md
No malicious behavior is evident in this fragment. It documents normal page-local configuration, but it presents two potentially dangerous rendering patterns: unescaped JSON-LD and arbitrary extraHead HTML. If any corresponding values can be influenced by users or untrusted database content, the application may be vulnerable to stored or reflected XSS. Values should be validated and safely serialized for script contexts, and arbitrary HTML should be restricted or sanitized.
Confidence: 96%Severity: 58%
Audit Metadata