svg-hand-drawn-preview
Warn
Audited by Socket on Oct 3, 2026
1 alert found:
AnomalyAnomalyassets/player.js
LOWAnomalyLOW
assets/player.js
No clear malware behavior is present. The main security concern is unsanitized caller-provided SVG markup inserted with innerHTML, which can enable DOM-based script execution when markup is untrusted. Use a trusted source or sanitize the SVG with an appropriate allowlist before insertion.
Confidence: 98%Severity: 55%
Audit Metadata