Security report for royallit/lookrides

Scanned by Merge Risk — the free A–F security grade for AI-built apps.

Merge Risk — Security Report17 July 2026

royallit/lookrides · branch master · 80 files scanned

Wide open

royallit/lookrides

80 files scanned·Next.js · Supabase · React

Not on fire, but unescaped html render and 11 more need attention before you call this shipped.

Security score40/100

Unescaped HTML renderLow

`src/app/fleet/page.tsx` passes a variable to `dangerouslySetInnerHTML`. If any part of that string comes from user input, it's a cross-site scripting hole. Sanitize it (e.g. DOMPurify) or render as text.

src/app/fleet/page.tsx:40

Unescaped HTML renderLow

`src/app/contact/page.tsx` passes a variable to `dangerouslySetInnerHTML`. If any part of that string comes from user input, it's a cross-site scripting hole. Sanitize it (e.g. DOMPurify) or render as text.

src/app/contact/page.tsx:57

Unescaped HTML renderLow

`src/app/routes/page.tsx` passes a variable to `dangerouslySetInnerHTML`. If any part of that string comes from user input, it's a cross-site scripting hole. Sanitize it (e.g. DOMPurify) or render as text.

src/app/routes/page.tsx:64

Fix it with your AI agentEvery finding, with file and line, as a prompt for Claude Code, Codex or Cursor. It starts fixing instead of hunting — and it ends by re-scanning, so “done” is proven rather than claimed.

9 more findings not shown hereWe don't publish a full findings list for a repo on a public page. Run the scan yourself — free, no signup, every finding.Scan it →

Is your repo leaking too?

Free, unlimited, every finding. No signup, no card, and we never store your code.

Scan my repo free