1. CodeQL Flags High-Severity URL Sanitization Flaw in Juice-Shop User Profile Route
A static security scan has identified a critical input validation weakness in the user profile update endpoint of the Juice Shop application. The CodeQL engine triggered rule `js/incomplete-url-substring-sanitization` against `routes/updateUserProfile.ts` at line 24, flagging logic that relies on substring matching to ...