The flaw is related to code for downloading a file after a user clicks a link. The file is fetched from my API as follows:

fetch(...)

.then((response) => {

  response.blob().then((blob) => {

    const url = window.URL.createObjectURL(new Blob([blob]));

    const link = document.createElement('a');

    link.href = url;

    link.setAttribute('download', `${fileName}`);

    document.body.appendChild(link); // <<<--- the flaw complains about this line

    link.click();

    if (link.parentNode)

      link.parentNode.removeChild(link);

  });

})

I don't know how to fix this. Any help would be appreciated.