fix: search results render user-controlled html cont... in App.jsx

[anupamme]

Summary

Fix high severity security issue in frontend/src/App.jsx.

Vulnerability

Field	Value
ID	V-001
Severity	HIGH
Scanner	multi_agent_ai
Rule	V-001
File	frontend/src/App.jsx:289
Assessment	Likely exploitable

Description: Search results render user-controlled HTML content without sanitization using React's dangerouslySetInnerHTML. The highlightedSummary variable contains data from external APIs that may include malicious HTML/JavaScript payloads.

Evidence

Exploitation scenario: Attacker posts malicious content on external platforms (Reddit, StackOverflow) containing JavaScript payloads.

Scanner confirmation: multi_agent_ai rule V-001 flagged this pattern.

Production code: This file is in the production codebase, not test-only code.

Threat Model Context

This is a Python library - vulnerabilities affect applications that import this code.

Changes

• frontend/src/App.jsx

Behavior Preservation

The change is scoped to 1 file on the vulnerable path; it only tightens handling of untrusted input and leaves valid inputs unaffected.

---

Automated security fix by OrbisAI Security

[deepsource-io]

DeepSource Code Review

We reviewed changes in e6f0f0c...d48ba33 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
Python		Aug 2, 2026 5:19a.m.	Review ↗
Docker		Aug 2, 2026 5:19a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.