Detective Suite

Security Detective

Analyze vulnerable script concatenation loops, audit network session tokens, and deploy standard defense practices to secure applications.

Progress1 of 4 (25%)

bug-component.tsx

export default function ProductReview({ review }) {
  // Rendering the user's review description safely?
  return (
    <div className="review-card">
      <h4>{review.author}</h4>
      <div dangerouslySetInnerHTML={{ __html: review.content }} />
    </div>
  );
}

● Warning:

Stored Cross-Site Scripting (XSS). Custom script strings execute immediately upon page load.

Case Details

Case #1: The Injected Script (XSS)

A simple profile review section lets users write text reviews. A malicious attacker submitted a review containing standard script tags, which executes in other users' browsers and steals session tokens.

Select Investigation Patch