Align race schedules with track catalog data#10
Conversation
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
Sorry @DaKongOlta, your pull request is larger than the review limit of 150000 diff characters
| const startMode = startProc?.value || raceSettings.startProc || 'standing'; | ||
| tags.push(getStartProcedureLabel(startMode)); | ||
| tags.push(aiLabels[aiLevel] || `KI: ${aiLevel}`); | ||
| eventTraitSummary.innerHTML = tags.map(tag => `<span>${tag}</span>`).join(''); |
There was a problem hiding this comment.
security (javascript.browser.security.insecure-document-method): User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities
Source: opengrep
| const startMode = startProc?.value || raceSettings.startProc || 'standing'; | ||
| tags.push(getStartProcedureLabel(startMode)); | ||
| tags.push(aiLabels[aiLevel] || `KI: ${aiLevel}`); | ||
| eventTraitSummary.innerHTML = tags.map(tag => `<span>${tag}</span>`).join(''); |
There was a problem hiding this comment.
security (javascript.browser.security.insecure-innerhtml): User controlled data in a eventTraitSummary.innerHTML is an anti-pattern that can lead to XSS vulnerabilities
Source: opengrep
| `<span>PaceIdx ${paceIndex} • Form ${formText} • Morale ${moralePct}%</span>` + | ||
| `<span>Driver Stats P${paceStat} | I${intelStat} | C${consistStat} | R${riskStat}</span></li>`; | ||
| }); | ||
| gridIntroList.innerHTML = listItems.join(''); |
There was a problem hiding this comment.
security (javascript.browser.security.insecure-document-method): User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities
Source: opengrep
| `<span>PaceIdx ${paceIndex} • Form ${formText} • Morale ${moralePct}%</span>` + | ||
| `<span>Driver Stats P${paceStat} | I${intelStat} | C${consistStat} | R${riskStat}</span></li>`; | ||
| }); | ||
| gridIntroList.innerHTML = listItems.join(''); |
There was a problem hiding this comment.
security (javascript.browser.security.insecure-innerhtml): User controlled data in a gridIntroList.innerHTML is an anti-pattern that can lead to XSS vulnerabilities
Source: opengrep
| sectorFeed.forEach(item => { | ||
| const li = document.createElement('li'); | ||
| if (item.className) li.classList.add(item.className); | ||
| li.innerHTML = `<span class=\"tag\">S${item.sector}</span><span class=\"driver\">#${item.number} ${item.driver}</span><span class=\"value\">${formatSplit(item.time)}${item.label ? ' ' + item.label : ''}</span>`; |
There was a problem hiding this comment.
security (javascript.browser.security.insecure-document-method): User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities
Source: opengrep
| warmupAudio(); | ||
| replaySpeed = parseFloat(replaySpeedSelect?.value || '1') || 1; | ||
| if (countdownTimer) { | ||
| clearIn |
There was a problem hiding this comment.
security (javascript.browser.security.insecure-innerhtml): User controlled data in a header.innerHTML is an anti-pattern that can lead to XSS vulnerabilities
Source: opengrep
| recordingReplay = true; | ||
| warmupAudio(); | ||
| replaySpeed = parseFloat(replaySpeedSelect?.value || '1') || 1; | ||
| if (countdownTimer) { | ||
| clearIn |
There was a problem hiding this comment.
security (javascript.browser.security.insecure-document-method): User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities
Source: opengrep
| recordingReplay = true; | ||
| warmupAudio(); | ||
| replaySpeed = parseFloat(replaySpeedSelect?.value || '1') || 1; | ||
| if (countdownTimer) { | ||
| clearIn |
There was a problem hiding this comment.
security (javascript.browser.security.insecure-innerhtml): User controlled data in a div.innerHTML is an anti-pattern that can lead to XSS vulnerabilities
Source: opengrep
| warmupAudio(); | ||
| replaySpeed = parseFloat(replaySpeedSelect?.value || '1') || 1; | ||
| if (countdownTimer) { | ||
| clearIn |
There was a problem hiding this comment.
security (javascript.browser.security.insecure-document-method): User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities
Source: opengrep
| warmupAudio(); | ||
| replaySpeed = parseFloat(replaySpeedSelect?.value || '1') || 1; | ||
| if (countdownTimer) { | ||
| clearIn |
There was a problem hiding this comment.
security (javascript.browser.security.insecure-innerhtml): User controlled data in a row.innerHTML is an anti-pattern that can lead to XSS vulnerabilities
Source: opengrep
1 participant
Summary
Testing
https://chatgpt.com/codex/tasks/task_e_68c9d8830d808324adea8afa75f49e4d