# XSS Vulnerability Scan - 20251123-080450 == v-html Usage (Vue XSS vector) == /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:53: v-html="renderedContent" /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/BusinessPlanGenerator.vue:35: v-html="renderedPlan" /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/GovernanceCharterGenerator.vue:35: v-html="renderedCharter" /home/administrator/projects/coppertone.tech/frontend/src/views/ArticleDetailView.vue:33:
/home/administrator/projects/coppertone.tech/frontend/src/views/ServiceDetailView.vue:33:
== innerHTML Usage == /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/BusinessPlanGenerator.vue:354: ${planContent.value?.innerHTML || ''} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/GovernanceCharterGenerator.vue:473: ${charterContent.value?.innerHTML || ''} /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.dom.d.ts:10758: * The **`innerHTML`** property of the Element interface gets or sets the HTML or XML markup contained within the element. /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.dom.d.ts:10760: * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Element/innerHTML) /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.dom.d.ts:10762: innerHTML: string; /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.dom.d.ts:30754: * The **`innerHTML`** property of the ShadowRoot interface sets gets or sets the HTML markup to the DOM tree inside the `ShadowRoot`. /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.dom.d.ts:30756: * [MDN Reference](https://developer.mozilla.org/docs/Web/API/ShadowRoot/innerHTML) /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.dom.d.ts:30758: innerHTML: string; /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/parse5@8.0.0/node_modules/parse5/dist/index.d.ts:65: * @param fragmentContext Parsing context element. If specified, given fragment will be parsed as if it was set to the context element's `innerHTML` property. /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/cypress@15.7.0/node_modules/cypress/types/jquery/JQueryStatic.d.ts:84: * @example ​ ````Create a div element (and all of its contents) dynamically and append it to the body element. Internally, an element is created and its innerHTML property set to the given markup. /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/cypress@15.7.0/node_modules/cypress/types/jquery/JQuery.d.ts:4558: a.push( divs[ i ].innerHTML ); /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/cypress@15.7.0/node_modules/cypress/types/jquery/JQuery.d.ts:11472: a.push( divs[ i ].innerHTML ); /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/@vue+runtime-dom@3.5.24/node_modules/@vue/runtime-dom/dist/runtime-dom.d.ts:390: innerHTML?: string | undefined; /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/@vue+runtime-dom@3.5.24/node_modules/@vue/runtime-dom/dist/runtime-dom.d.ts:835: innerHTML?: string | undefined; /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/parse5@7.3.0/node_modules/parse5/dist/index.d.ts:65: * @param fragmentContext Parsing context element. If specified, given fragment will be parsed as if it was set to the context element's `innerHTML` property. /home/administrator/projects/coppertone.tech/frontend/node_modules/.pnpm/parse5@7.3.0/node_modules/parse5/dist/cjs/index.d.ts:65: * @param fragmentContext Parsing context element. If specified, given fragment will be parsed as if it was set to the context element's `innerHTML` property. /home/administrator/projects/coppertone.tech/frontend/node_modules/.ignored/jsdom/node_modules/parse5/dist/index.d.ts:65: * @param fragmentContext Parsing context element. If specified, given fragment will be parsed as if it was set to the context element's `innerHTML` property. /home/administrator/projects/coppertone.tech/frontend/node_modules/.ignored/cypress/types/jquery/JQueryStatic.d.ts:84: * @example ​ ````Create a div element (and all of its contents) dynamically and append it to the body element. Internally, an element is created and its innerHTML property set to the given markup. /home/administrator/projects/coppertone.tech/frontend/node_modules/.ignored/cypress/types/jquery/JQuery.d.ts:4558: a.push( divs[ i ].innerHTML ); /home/administrator/projects/coppertone.tech/frontend/node_modules/.ignored/cypress/types/jquery/JQuery.d.ts:11472: a.push( divs[ i ].innerHTML ); /home/administrator/projects/coppertone.tech/frontend/node_modules/.ignored/typescript/lib/lib.dom.d.ts:10758: * The **`innerHTML`** property of the Element interface gets or sets the HTML or XML markup contained within the element. /home/administrator/projects/coppertone.tech/frontend/node_modules/.ignored/typescript/lib/lib.dom.d.ts:10760: * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Element/innerHTML) /home/administrator/projects/coppertone.tech/frontend/node_modules/.ignored/typescript/lib/lib.dom.d.ts:10762: innerHTML: string; /home/administrator/projects/coppertone.tech/frontend/node_modules/.ignored/typescript/lib/lib.dom.d.ts:30754: * The **`innerHTML`** property of the ShadowRoot interface sets gets or sets the HTML markup to the DOM tree inside the `ShadowRoot`. /home/administrator/projects/coppertone.tech/frontend/node_modules/.ignored/typescript/lib/lib.dom.d.ts:30756: * [MDN Reference](https://developer.mozilla.org/docs/Web/API/ShadowRoot/innerHTML) /home/administrator/projects/coppertone.tech/frontend/node_modules/.ignored/typescript/lib/lib.dom.d.ts:30758: innerHTML: string; /home/administrator/projects/coppertone.tech/frontend/node_modules/parse5/dist/index.d.ts:65: * @param fragmentContext Parsing context element. If specified, given fragment will be parsed as if it was set to the context element's `innerHTML` property. /home/administrator/projects/coppertone.tech/frontend/node_modules/parse5/dist/cjs/index.d.ts:65: * @param fragmentContext Parsing context element. If specified, given fragment will be parsed as if it was set to the context element's `innerHTML` property. /home/administrator/projects/coppertone.tech/frontend/node_modules/@vue/runtime-dom/dist/runtime-dom.d.ts:390: innerHTML?: string | undefined; /home/administrator/projects/coppertone.tech/frontend/node_modules/@vue/runtime-dom/dist/runtime-dom.d.ts:835: innerHTML?: string | undefined; == document.write Usage == /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/BusinessPlanGenerator.vue:339: printWindow.document.write(` /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/GovernanceCharterGenerator.vue:450: printWindow.document.write(` == Template Literal Injection == /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:95:**${name}** — ${getAnswer('8.2.2')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:98:${getAnswer('1.1.2')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:108:${getAnswer('1.1.1')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:111:${getAnswer('8.2.1')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:114:${getAnswer('8.2.2')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:120:${getAnswer('1.2.1')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:123:${getAnswer('1.2.3')} — ${getAnswer('1.2.4')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:130:> ${getAnswer('1.1.3')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:143:Contact us today to discuss how we can help with ${getAnswer('1.2.1')}. /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:145:**Serving:** ${getAnswer('1.2.2')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:158:${name} is a trust-operated business providing ${getAnswer('1.2.1')}. /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:161:> ${getAnswer('1.1.3')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:164:${getAnswer('1.1.2')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:171:${getAnswer('1.2.3')} — ${getAnswer('1.2.4')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:175:- **Professional Excellence:** ${getAnswer('7.3.2')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:176:- **Client Focus:** ${getAnswer('8.2.2')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:183:${name} operates as a DBA under a ${getAnswer('2.1.3')} trust. This structure provides: /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:187:- Tax efficiency (${getAnswer('2.1.2')}) /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:190:${getAnswer('5.1.1')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:197:${getAnswer('3.4.1')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:199:${getAnswer('3.4.2')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:205:**Location:** ${getAnswer('7.1.1')} — ${getAnswer('7.1.2')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:216:${getAnswer('1.2.1')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:223:${getAnswer('7.3.1')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:226:${getAnswer('7.3.2')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:233:${getAnswer('9.3.2')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:240:${getAnswer('1.2.2')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:243:${getAnswer('1.2.3')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:244:${getAnswer('1.2.4')} /home/administrator/projects/coppertone.tech/frontend/src/components/trustBusiness/WebsiteCopyGenerator.vue:251:${getAnswer('7.2.1')}