Uploaded image for project: 'Policy Framework'
  1. Policy Framework
  2. POLICY-511 Fix Fortify Scan Issues
  3. POLICY-551

Fix Fortify Cross-Site Scripting Issue

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Done
    • Icon: Medium Medium
    • None
    • None
    • None
    • None

      Cross-site scripting (XSS) vulnerabilities occur when:

      1. Data enters a web application through an untrusted source. In the case of Reflected XSS, the untrusted source is typically a web request, while in the case of Persisted (also known as Stored) XSS it is typically a database or other back-end datastore.
      Such as data enters by getParameter().

      2. The data is included in dynamic content that is sent to a web user without being validated.

            guangxingwang guangxingwang
            guangxingwang guangxingwang
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: