{"version":"1.0","provider_name":"The S-Unit","provider_url":"https:\/\/the-s-unit.nl\/en\/","title":"TSU-09: Insecure UI components - The S-Unit","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"vV0BelKWik\"><a href=\"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/tsu-09\/\">TSU-09: Insecure UI components<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/tsu-09\/embed\/#?secret=vV0BelKWik\" width=\"600\" height=\"338\" title=\"&#8220;TSU-09: Insecure UI components&#8221; &#8212; The S-Unit\" data-secret=\"vV0BelKWik\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/\/# sourceURL=https:\/\/the-s-unit.nl\/wp-includes\/js\/wp-embed.min.js\n<\/script>\n","description":"TSU-09: Insecure UI components TSU-09 concerns security issues in Mendix components that are rendered or executed in the user\u2019s (mobile) browser. Mendix uses various types of UI components that run in the browser and can therefore expose sensitive or malicious data. This includes, among others: Pages and snippets Nanoflows JavaScript-widgets JavaScript actions Constants with Expose [&hellip;]","thumbnail_url":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/The-S-unit-Top-10-TSU-9.png"}