Apv271212 (Community Member) asked a question.

How to fix jquery issues under CWE 80?

Hi Team,

 

We are using previously we were using jquery 1.11.1 in our application. We took the URL (CVE-2020-11023 | Mend Vulnerability Database) as reference and we upgraded the jquery from 1.11.1 to 3.5.1. Still we have some open veracode issues like the ones below:

1. $("#elementid").first().after("<div id='errorid' class='classname'>" + <error message>+"</div>");

2.$("#elementid").append(item);

3.$(arraylistname).each(function(i, v) {});

4. $('#elementid').attr("aria-label","<label name>");

5. $("#elementid").html(value);

 

Can someone please guide as how to fix these issues?


Topics (7)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.