jeudi 21 novembre 2019

kiuwan violation w.println( req.getParameter("input") ); // VIOLATION cross-site scripting

I work with kiuwan and I have the following violation in many places. I would like to find a solution which solves the issue in all the sources.

One solution is owasp, but I have to solve this one at time.

The kind of the code lines are in jsp

<%
    final String sConvocatoria = Cadenas.vacioSiNulo(request.getParameter(Constantes.PANT_CONVOCATORIA));
    Usuario usuarioSesion = Seguridad.getUsuario(null, request.getRemoteUser(), request.getSession());
%>

Is there a solution which solve this in all the sources?




Aucun commentaire:

Enregistrer un commentaire