<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[[Aikido][GH#8] Using document write methods can lead to XSS attacks (4 sites)]]></title><description><![CDATA[<h2>Security finding (Aikido)</h2>
<p dir="auto"><strong>Disposition:</strong> no remediation (logged).</p>
<ul>
<li><strong>GitHub issue:</strong> <a href="https://github.com/richharrington20/rig/issues/8" rel="nofollow ugc">8</a></li>
<li><strong>Aikido group:</strong> <code>40056531</code></li>
<li><strong>Severity:</strong> <code>high</code></li>
<li><strong>Type:</strong> <code>sast</code></li>
<li><strong>Findings in group:</strong> 4</li>
<li><strong>Changelog hub:</strong> <a href="https://userig.app/changelog?hub=bugs" rel="nofollow ugc">https://userig.app/changelog?hub=bugs</a></li>
</ul>
<h3>Labels</h3>
<p dir="auto"><code>security</code>, <code>aikido</code>, <code>no-remediation</code>, <code>severity:high</code>, <code>type:sast</code>, <code>github-8</code></p>
<p dir="auto"><em>Forum tag limit is 5 — full label set listed above and on the matching GitHub issue.</em></p>
<h3>Aikido findings</h3>
<ul>
<li><a href="https://app.aikido.dev/issues/single/487719137?groupId=133645" rel="nofollow ugc">487719137</a> — <code>apps/web/legacy-html/changelog.html:161</code> — severity 80 (high)</li>
<li><a href="https://app.aikido.dev/issues/single/487719143?groupId=133645" rel="nofollow ugc">487719143</a> — <code>apps/web/legacy-html/index.html:269</code> — severity 80 (high)</li>
<li><a href="https://app.aikido.dev/issues/single/487719141?groupId=133645" rel="nofollow ugc">487719141</a> — <code>apps/web/legacy-html/index.html:212</code> — severity 55 (medium)</li>
<li><a href="https://app.aikido.dev/issues/single/487719139?groupId=133645" rel="nofollow ugc">487719139</a> — <code>apps/web/legacy-html/cloud.html:127</code> — severity 40 (medium)</li>
</ul>
<hr />
<p dir="auto">Tracked in the Rig security log. Posted by Rig for visibility on the Bugs board.</p>
]]></description><link>https://community.userig.app/topic/109/aikido-gh-8-using-document-write-methods-can-lead-to-xss-attacks-4-sites</link><generator>RSS for Node</generator><lastBuildDate>Sat, 19 Sep 2026 00:36:56 GMT</lastBuildDate><atom:link href="https://community.userig.app/topic/109.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 12 Aug 2026 18:32:57 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to [Aikido][GH#8] Using document write methods can lead to XSS attacks (4 sites) on Wed, 12 Aug 2026 21:40:07 GMT]]></title><description><![CDATA[<p dir="auto"><strong>Resolved in Cloud 0.18.0.</strong><br />
GitHub: <a href="https://github.com/richharrington20/rig/issues/8" rel="nofollow ugc">https://github.com/richharrington20/rig/issues/8</a><br />
Changelog: <a href="https://userig.app/changelog" rel="nofollow ugc">https://userig.app/changelog</a><br />
Bugs hub: <a href="https://userig.app/changelog?hub=bugs" rel="nofollow ugc">https://userig.app/changelog?hub=bugs</a></p>
]]></description><link>https://community.userig.app/post/144</link><guid isPermaLink="true">https://community.userig.app/post/144</guid><dc:creator><![CDATA[Rig]]></dc:creator><pubDate>Wed, 12 Aug 2026 21:40:07 GMT</pubDate></item></channel></rss>