[{"data":1,"prerenderedAt":325},["ShallowReactive",2],{"navigation_docs":3,"diagnostic-content-NUXT0056":44},[4,8,12,16,20,24,28,32,36,40],{"title":5,"path":6,"stem":7},"CLI","\u002Fcli","1.cli",{"title":9,"path":10,"stem":11},"Nuxt","\u002Fnuxt","2.nuxt",{"title":13,"path":14,"stem":15},"Vue","\u002Fvue","3.vue",{"title":17,"path":18,"stem":19},"Vite","\u002Fvite","4.vite",{"title":21,"path":22,"stem":23},"Nitro","\u002Fnitro","5.nitro",{"title":25,"path":26,"stem":27},"TypeScript","\u002Ftypescript","6.typescript",{"title":29,"path":30,"stem":31},"shadcn","\u002Fshadcn","7.shadcn",{"title":33,"path":34,"stem":35},"Package","\u002Fpackage","8.package",{"title":37,"path":38,"stem":39},"Extending Doctor","\u002Fextending","9.extending",{"title":41,"path":42,"stem":43},"Pinia","\u002Fpinia","9.pinia",{"id":45,"title":46,"body":47,"category":53,"code":314,"description":315,"docsUrl":54,"extension":316,"fix":82,"framework":317,"meta":318,"navigation":319,"pack":56,"path":320,"ruleId":57,"rulePath":58,"seo":321,"severity":59,"source":60,"sourceUrl":61,"stem":322,"why":323,"__hash__":324},"diagnostics\u002Fdiagnostics\u002FNUXT0056.md","NUXT0056: Use useHeadSafe for untrusted head values",{"type":48,"value":49,"toc":304},"minimark",[50,62,67,76,80,83,87,92,95,183,186,240,244,247,272,276,288,292,300],[51,52],"rule-metadata",{"category":53,"docsUrl":54,"fix":55,"pack":56,"ruleId":57,"rulePath":58,"severity":59,"source":60,"sourceUrl":61},"security","https:\u002F\u002Fnuxt.com\u002Fdocs\u002F4.x\u002Fapi\u002Fcomposables\u002Fuse-head-safe#usage","suggestion","vite-doctor\u002Fnuxt","nuxt\u002Fsecurity\u002Fprefer-useheadsafe-for-untrusted-values","\u002Fnuxt\u002Frules\u002Fsecurity\u002Fprefer-useheadsafe-for-untrusted-values","warn","src\u002Frule-packs\u002Fnuxt\u002Frules\u002Fnuxt\u002Fprefer-use-head-safe-for-untrusted-values.ts","https:\u002F\u002Fgithub.com\u002Fonmax\u002Fvite-doctor\u002Fblob\u002Fmain\u002Fsrc\u002Frule-packs\u002Fnuxt\u002Frules\u002Fnuxt\u002Fprefer-use-head-safe-for-untrusted-values.ts",[63,64,66],"h2",{"id":65},"why-it-happens","Why it happens",[68,69,70,71,75],"p",{},"Values derived from routes, content, or users can inject unsafe head attributes when passed through unrestricted ",[72,73,74],"code",{},"useHead()",".",[63,77,79],{"id":78},"fix","Fix",[68,81,82],{},"Use the Nuxt-supported useheadsafe for untrusted values pattern instead.",[63,84,86],{"id":85},"example","Example",[88,89,91],"h3",{"id":90},"use-useheadsafe-for-untrusted-values","Use useHeadSafe for untrusted values",[68,93,94],{},"Before",[96,97,102],"pre",{"className":98,"code":99,"language":100,"meta":101,"style":101},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","const route = useRoute()\nuseHead({\n  title: route.query.title as string,\n})\n","ts","",[72,103,104,128,140,174],{"__ignoreMap":101},[105,106,109,113,117,121,125],"span",{"class":107,"line":108},"line",1,[105,110,112],{"class":111},"spNyl","const",[105,114,116],{"class":115},"sTEyZ"," route ",[105,118,120],{"class":119},"sMK4o","=",[105,122,124],{"class":123},"s2Zo4"," useRoute",[105,126,127],{"class":115},"()\n",[105,129,131,134,137],{"class":107,"line":130},2,[105,132,133],{"class":123},"useHead",[105,135,136],{"class":115},"(",[105,138,139],{"class":119},"{\n",[105,141,143,147,150,153,155,158,160,163,167,171],{"class":107,"line":142},3,[105,144,146],{"class":145},"swJcz","  title",[105,148,149],{"class":119},":",[105,151,152],{"class":115}," route",[105,154,75],{"class":119},[105,156,157],{"class":115},"query",[105,159,75],{"class":119},[105,161,162],{"class":115},"title ",[105,164,166],{"class":165},"s7zQu","as",[105,168,170],{"class":169},"sBMFI"," string",[105,172,173],{"class":119},",\n",[105,175,177,180],{"class":107,"line":176},4,[105,178,179],{"class":119},"}",[105,181,182],{"class":115},")\n",[68,184,185],{},"After",[96,187,189],{"className":98,"code":188,"language":100,"meta":101,"style":101},"const route = useRoute()\nuseHeadSafe({\n  title: route.query.title as string,\n})\n",[72,190,191,203,212,234],{"__ignoreMap":101},[105,192,193,195,197,199,201],{"class":107,"line":108},[105,194,112],{"class":111},[105,196,116],{"class":115},[105,198,120],{"class":119},[105,200,124],{"class":123},[105,202,127],{"class":115},[105,204,205,208,210],{"class":107,"line":130},[105,206,207],{"class":123},"useHeadSafe",[105,209,136],{"class":115},[105,211,139],{"class":119},[105,213,214,216,218,220,222,224,226,228,230,232],{"class":107,"line":142},[105,215,146],{"class":145},[105,217,149],{"class":119},[105,219,152],{"class":115},[105,221,75],{"class":119},[105,223,157],{"class":115},[105,225,75],{"class":119},[105,227,162],{"class":115},[105,229,166],{"class":165},[105,231,170],{"class":169},[105,233,173],{"class":119},[105,235,236,238],{"class":107,"line":176},[105,237,179],{"class":119},[105,239,182],{"class":115},[63,241,243],{"id":242},"verify-the-fix","Verify the fix",[68,245,246],{},"Run only this rule after editing so the report stays focused on the diagnostic you are closing:",[96,248,252],{"className":249,"code":250,"language":251,"meta":101,"style":101},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","pnpm nuxt doctor --rules nuxt\u002Fsecurity\u002Fprefer-useheadsafe-for-untrusted-values\n","bash",[72,253,254],{"__ignoreMap":101},[105,255,256,259,263,266,269],{"class":107,"line":108},[105,257,258],{"class":169},"pnpm",[105,260,262],{"class":261},"sfazB"," nuxt",[105,264,265],{"class":261}," doctor",[105,267,268],{"class":261}," --rules",[105,270,271],{"class":261}," nuxt\u002Fsecurity\u002Fprefer-useheadsafe-for-untrusted-values\n",[63,273,275],{"id":274},"useful-links","Useful links",[277,278,279],"ul",{},[280,281,282],"li",{},[283,284,287],"a",{"href":54,"rel":285},[286],"nofollow","Upstream docs",[63,289,291],{"id":290},"related-rule","Related rule",[277,293,294],{},[280,295,296],{},[283,297,298],{"href":58},[72,299,57],{},[301,302,303],"style",{},"html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}",{"title":101,"searchDepth":130,"depth":130,"links":305},[306,307,308,311,312,313],{"id":65,"depth":130,"text":66},{"id":78,"depth":130,"text":79},{"id":85,"depth":130,"text":86,"children":309},[310],{"id":90,"depth":142,"text":91},{"id":242,"depth":130,"text":243},{"id":274,"depth":130,"text":275},{"id":290,"depth":130,"text":291},"NUXT0056","Finds Nuxt security code that should use the supported useheadsafe for untrusted values pattern instead.","md","nuxt",{},true,"\u002Fdiagnostics\u002Fnuxt0056",{"title":46,"description":315},"diagnostics\u002FNUXT0056","Values derived from routes, content, or users can inject unsafe head attributes when passed through unrestricted useHead().","u6j8anS4C8AEERsKvtmBbL4rCkYqFHW0vilcULllMHc",1791309500944]