Question
DXC
SG
Last activity: 8 Nov 2019 16:02 EST
Can any one let me know how XSS is handled by PEGA. Is there any DSS or prconfig setting?
Can any one let me know how XSS is handled by PEGA. Is there any DSS or prconfig setting?
Pegasystems Inc.
FR
Hello,
Have you seen this article maybe: https://community.pega.com/knowledgebase/articles/security/best-practices-avoid-cross-site-scripting-xss-vulnerabilities
Pegasystems Inc.
US
Hello,
Rule Security Analyzer also provides options for scanning your code for XSS patterns: https://community.pega.com/sites/default/files/hel_v72/tools/rulesecurityanalyzer/aboutrulesecurityanalyzer.htm
The Rule Analyzer searches for vulnerabilities in code by searching for matches to regular expressions (regex) defined in Rule Analyzer Regular Expressions rules. The system provides these standard regular expressions:
Hello,
Rule Security Analyzer also provides options for scanning your code for XSS patterns: https://community.pega.com/sites/default/files/hel_v72/tools/rulesecurityanalyzer/aboutrulesecurityanalyzer.htm
The Rule Analyzer searches for vulnerabilities in code by searching for matches to regular expressions (regex) defined in Rule Analyzer Regular Expressions rules. The system provides these standard regular expressions:
- pyCrossSiteScripting
- pyCrossSiteScriptingFromParam
Pegasystems Inc.
US
Here's more current version of help for Security Analyzer: https://community.pega.com/sites/default/files/help_v83/procomhelpmain.htm#security/rule-security/sec-search-sec-vulnerabilities-tsk.htm