Question

4
Replies
2496
Views
 Hemalatha Medarametla (_Hemalatha_M)
Infosys Ltd

Infosys Ltd
IN
_Hemalatha_M Member since 2016 14 posts
Infosys Ltd
Posted: August 9, 2017
Last activity: August 16, 2017
Posted: 9 Aug 2017 3:22 EDT
Last activity: 16 Aug 2017 2:22 EDT
Closed
Solved

Cross site scripting security issue

Hi

When ever user enters in AddNote and clicks on submit,Cross site scripting security issue is occuring. Please refer attached images and let me know how to overcome the issue..

Regards

HemalathaM.

Security
Moderation Team has archived post, This thread is closed to future replies. Content and links will no longer be updated. If you have the same/similar Question, please write a new Question.
Posted: 3 years ago
Posted: 9 Aug 2017 9:37 EDT
Brad Tainter (Br@dTainter_GCS)
PEGA
Client Solutions Fellow
Pegasystems Inc.
US

Hi Hemlatha,


I would suggest you open an SR to have this looked at.  It is likely that the control you are using in not filtering for malicious content.
Posted: 3 years ago
Posted: 9 Aug 2017 10:44 EDT
Lochana Durgada Vijayakumar (Lochan_DV)
MOD
Lead Technical Documentation Specialist
Pegasystems Inc.
IN

Hello!


Please let us know if you do log an SR for this and its ID. That way we can track it and follow-up this discussion with the resolution.


Thank you,

Accepted Solution

Posted: 3 years ago
Posted: 16 Aug 2017 1:04 EDT
Hemalatha Medarametla (_Hemalatha_M)
Infosys Ltd

Infosys Ltd
IN

Hi All,


      Issue is resolved.I have used  crossScriptingFilter Function i.e  done property-set on pyNote as @(Pega-RULES:Utilities).crossScriptingFilter(.pyNote) in Postprocessing of flowaction .