2024-12-12-add-markupstring-as-html-injection-sink.md

category	minorAnalysis

• Added the constructor and explicit cast operator of Microsoft.AspNetCore.Components.MarkupString as an html-injection sink. This will help catch cross-site scripting resulting from using MarkupString.