Question
4
Replies
2206
Views
Infosys Ltd
Posted: 3 years ago
Last activity: 3 years 2 months ago
Cross site scripting security issue
Hi
When ever user enters in AddNote and clicks on submit,Cross site scripting security issue is occuring. Please refer attached images and let me know how to overcome the issue..
Regards
HemalathaM.
Posted: 3 years ago
Posted: 3 years ago
Hi Hemlatha,
I would suggest you open an SR to have this looked at. It is likely that the control you are using in not filtering for malicious content.
Posted: 3 years ago
Hello!
Please let us know if you do log an SR for this and its ID. That way we can track it and follow-up this discussion with the resolution.
Thank you,
Accepted Solution
Posted: 3 years ago
Hi All,
Issue is resolved.I have used crossScriptingFilter Function i.e done property-set on pyNote as @(Pega-RULES:Utilities).crossScriptingFilter(.pyNote) in Postprocessing of flowaction .
Hi Hemlatha,
Why are you adding javascript tag in AddNote? Is it your business requirement? This doesn't look cross site scripting issue.
Pls check the below link to get more info on cross site issue.
https://pdn.pega.com/best-practices-avoid-cross-site-scripting-xss-vuln…