E2002

navigateTo() was given a URL using a dangerous protocol (javascript:, data:, vbscript:). Nuxt blocks these to prevent XSS. This almost always means unsanitized user input reached navigateTo().

Resolution

Validate and sanitize user-provided URLs before navigating. Allow only http:, https:, or relative paths.

::read-more{to="/docs/api/utils/navigate-to"} ::