I started developing a managed package and I need to manipulate the DOM in a Lightning Web Component, In the component HTML, I added lwc:dom="manual" to the target element and everything works well.

When I run it through Clayton it gives me an issue regarding XSS:

This component uses direct DOM manipulation, which is not recommended as it increases the risk of XSS.

Does anyone have an idea if that could be an issue once I request the security review?

Thanks in Advance

  • What is Clayton? Can you provide us with a link? Thank you.
    – Arthlete
    Commented Aug 21, 2021 at 16:44

1 Answer 1


This warning should not automatically fail your security review. However, your package will need additional analysis to determine if there is any actual XSS vectors. As long as you're following best practices, your package could still pass security review. You should direct specific questions to Partner Support.

  • THanks for your answer!
    – Bruno Diaz
    Commented Sep 16, 2020 at 12:06

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .