• caglararli@hotmail.com
  • 05386281520

Vue HTML escape

Çağlar Arlı      -    11 Views

Vue HTML escape

I have done a code scan and fail to understand whether there is a real problem. For both cases I get "Vue HTML escaping is disabled.".

  • Case 1: <a :href="return.url"> doesn't this simply embed the value of return.url? Is this vulnerable to a XSS?
  • Case 2: <span v-html="htmlTemp"> I read in the Vue.js documentation that v-html is potentially dangerous.

How would I mitigate it?