Code reviewMediumcr-g409

Subject XssLevel Mid–Senior~18 minCommon in Security interviewsIndustries Software development

Question

Review this JavaScript comment-rendering helper.

What a strong answer looks like

Separate real bugs from style. Rank issues by severity, point at the root cause rather than the symptom, and suggest a concrete fix — specific and kind.

Learn the concepts

Talk through your review

Code to reviewjs

1function renderComment(comment) {2  const el = document.createElement('div');3  el.className = 'comment';4  el.innerHTML = `5    <strong>${comment.author}</strong>6    <p>${comment.body}</p>7    <a href="mailto:${comment.email}">Reply</a>8  `;9  return el;10}

Run or narrate your approach, then ask the coach.