Question
Infosys Ltd
IN
Last activity: 16 Aug 2017 2:22 EDT
Cross site scripting security issue
Hi
When ever user enters in AddNote and clicks on submit,Cross site scripting security issue is occuring. Please refer attached images and let me know how to overcome the issue..
Regards
HemalathaM.
Accepted Solution
Infosys Ltd
IN
Hi All,
Issue is resolved.I have used crossScriptingFilter Function i.e done property-set on pyNote as @(Pega-RULES:Utilities).crossScriptingFilter(.pyNote) in Postprocessing of flowaction .
BUPA
AU
Hi Hemlatha,
Why are you adding javascript tag in AddNote? Is it your business requirement? This doesn't look cross site scripting issue.
Pls check the below link to get more info on cross site issue.
https://docs-previous.pega.com/security/85/understanding-cross-site-scripting
Pegasystems Inc.
US
Hi Hemlatha,
I would suggest you open an SR to have this looked at. It is likely that the control you are using in not filtering for malicious content.
Pegasystems Inc.
IN
Hello!
Please let us know if you do log an SR for this and its ID. That way we can track it and follow-up this discussion with the resolution.
Thank you,
Accepted Solution
Infosys Ltd
IN
Hi All,
Issue is resolved.I have used crossScriptingFilter Function i.e done property-set on pyNote as @(Pega-RULES:Utilities).crossScriptingFilter(.pyNote) in Postprocessing of flowaction .