Anypoint Best Practices

general > no-eval-in-markdown

Guidance

This rule protects against cross-site scripting (XSS) attacks that could happen when you add description
documents from third parties and use the parsed content rendered in HTML/JS. If one of those third parties
does something like inject `eval()` JavaScript statements, it could lead to an XSS attack.

Applies to WebAPI

Constraint

Type: Declarative Validation