io.github.jmshinhwa/lit-binding-xss-audit

Official

by jmshinhwa · JavaScript

Finds the lit-html binding positions auto-escaping does not cover, before the component ships

io.github.jmshinhwa/lit-binding-xss-audit — Model Context Protocol (MCP) Server

The MCP server io.github.jmshinhwa/lit-binding-xss-audit detects potential XSS issues in lit-html. Its description indicates it focuses on finding lit-html binding positions that auto-escaping does not cover and doing so before the component ships. The server is identified by slug io-github-jmshinhwa-lit-binding-xss-audit.

🛠️ Key Features

Finds lit-html binding positions not covered by auto-escaping
XSS-focused for lit-html usage prior to component release

🚀 Use Cases

Review lit-html component bindings for missed auto-escaping coverage
Pre-release inspection to reduce XSS risk in bindings

⚡ Developer Benefits

Highlights binding positions where auto-escaping may be insufficient
Supports earlier detection in the development lifecycle

Topics

compliancecursordevsecopslintermcp-serveropen-vsxvscode-extension

Install

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "lit-binding-xss-audit": {
      "command": "npx",
      "args": [
        "-y",
        "@readystack/lit-binding-xss-audit@1.0.4",
        "--mcp"
      ]
    }
  }
}