Unverified50% confidenceFactExact time
If LLM output is rendered or executed without encoding, it can lead to XSS (when rendered as HTML/Markdown), SQL injection (when concatenated into database queries), and SSRF (when URLs are included for backend fetching).
1
Sources
50%
Confidence
Long-term
Relevance
10/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSSR 指在服务器端将组件渲染为完整 HTML 字符串返回浏览器后再通过水合过程绑定交互逻辑，SSG 则在构建时预先生成所有页面的 HTML 文件61% similarUnverifiedSSG（静态站点生成）在构建阶段将所有页面预渲染为纯 HTML 文件，部署后无需服务器动态计算，直接由 CDN 分发静态文件61% similarUnverifiedAllowing users to submit rich text content containing HTML markup can lead to XSS (Cross-Site Scripting) attacks, where malicious users can inject script tags to execute arbitrary JavaScript code.60% similarUnverified团队尝试了SQL、XML、CSV/TSV视图、HTML等多种电子表格表示方式，其中SQL和XML失败，HTML方向正确并促使团队构建了渲染引擎59% similarUnverifiedServer-side rendering means pages have their content fully populated before reaching the client, avoiding the problem where purely front-end rendering prevents crawlers from retrieving actual content.59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/998096API
curl https://kongchang.com/api/v1/knowledge/claims/998096MCP
get_claim(id=998096)