[Security campaign tracking] Cross-site scripting (CWE-79)

[github-campaigns]

A new security campaign has been created in your repository. This issue has been automatically created to help you and your team plan and discuss how to fix the alerts in the campaign and reduce your security risk.

[Security campaign] Cross-site scripting (CWE-79)

Description
Remediating Cross-Site Scripting (XSS) vulnerabilities prevents data theft, session hijacking, and unauthorized actions, ensuring regulatory compliance, maintaining application integrity, and enhancing user trust.

Due Date
Mar 15, 2026

Campaign manager

• @LukeLarge

[github-campaigns]

This campaign was due on Mar 15, 2026. There are currently 46 open alerts.

You can take action by:

• mitigating the remaining vulnerabilities in the security campaign.
• asking a campaign manager to extend the due date.

[copilot-swe-agent]

The agent encountered an error and was unable to start working on this issue: This may be caused by a repository ruleset violation. See granting bypass permissions for the agent, or please contact support if the issue persists.