1

I started developing a managed package and I need to manipulate the DOM in a Lightning Web Component, In the component HTML, I added lwc:dom="manual" to the target element and everything works well.

When I run it through Clayton it gives me an issue regarding XSS:

This component uses direct DOM manipulation, which is not recommended as it increases the risk of XSS.

Does anyone have an idea if that could be an issue once I request the security review?

Thanks in Advance

Improve this question
1
  • What is Clayton? Can you provide us with a link? Thank you.
    – Arthlete
    Aug 21, 2021 at 16:44

1 Answer 1

Reset to default
2

This warning should not automatically fail your security review. However, your package will need additional analysis to determine if there is any actual XSS vectors. As long as you're following best practices, your package could still pass security review. You should direct specific questions to Partner Support.

Improve this answer
1
  • THanks for your answer!
    – Bruno Diaz
    Sep 16, 2020 at 12:06

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .