Tencent Technical Engineering
Apr 10, 2025 · Information Security
AI-Generated Code Introduces XSS Vulnerabilities: A Case Study and Security Guidance
The Woodpecker team shows that AI‑generated code, exemplified by Simon Willison’s HTML slideshow tool, can embed unsanitized inputs that create exploitable XSS flaws, and they recommend zero‑trust AI prompts, rigorous input filtering, CSP, AI‑assisted scanning, and secure supply‑chain practices to mitigate such risks.
AI securityCSPOpen Source
0 likes · 9 min read