Hi @RSharma055327 (Community Member)​ ,

Veracode Static Analysis reports a flaw of CWE 80 Basic XSS when we can see dynamic data going into the jQuery function, in your example this would likely be "$(response.Results)". It appears though, from the rest of you example that you're not intending this to be HTML but instead this is an array with objects?

In this case we'd recommend replacing that with Array.forEach ( https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/forEach ), in your example:

response.Results.forEach(function (element) {

if (AFIS.fundName !== 'AFIS Returns') {

if (element.language.includes(missingName)) {

element.language = element.language.replace(missingName, AFIS.fundName);

}

}

});

Thank you,

Boy Baukema