XSS and Sanitization Failures
LLMs frequently suggest using dangerouslySetInnerHTML in React without any mention of DOMPurify or other sanitization methods. For a developer looking for a quick fix to render CMS content, this is a wide-open door for Cross-Site Scripting attacks. The model prioritizes "making it work" over "making it secure," which is a fundamental flaw in automated frontend generation.