no-direct-write-to-responsewriter


Detected directly writing or similar in 'http.ResponseWriter.write()'. This bypasses HTML escaping that prevents cross-site scripting vulnerabilities. Instead, use the 'html/template' package and render data using 'template.Execute()'.
Checks
Activity
ControlFlow
Detects
CWE79