Aalexbit-codemod

pythonsecurity-s5131-reflected-xss-mining

Mine pythonsecurity:S5131: Endpoints should not be vulnerable to reflected cross-site scripting (XSS) attacks; read-only metrics with blocking severity

miningmetricspythonsecuritypythonsecurity:S5131
Public
0 executions

Run locally

npx codemod pythonsecurity-s5131-reflected-xss-mining

pythonsecurity-s5131-reflected-xss-mining

Read-only mining codemod for pythonsecurity:S5131: Endpoints should not be vulnerable to reflected cross-site scripting (XSS) attacks.

Emits python_security_finding metric rows with blocking severity. Source files are never modified.

Rule

  • ID: pythonsecurity:S5131
  • Severity: blocking
  • Remediation: Escape or sanitize user input before including it in HTTP responses

Usage

bash

Development

bash

Ready to contribute?

Build your own codemod and share it with the community.