syncfusion-javascript-tab
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalyreferences/data-binding.md
LOWAnomalyLOW
references/data-binding.md
The fragment is legitimate UI documentation demonstrating dynamic tab content and network-backed loading. It contains no apparent supply-chain malware or intentional unauthorized behavior. It does demonstrate XSS-prone patterns: user input and remote response data are rendered as HTML through innerHTML, tab content, and template interpolation without sanitization or escaping. Applications using these examples should treat all DOM and network data as untrusted and sanitize HTML or render text safely.
Confidence: 98%Severity: 58%
Audit Metadata