I have an application that executes under Jboss server. I have an Apache server in front. My application contains a security vulnerability (XSS Cross-site scripting).
I wanted to know that I had to make changes in the code (HTML, JavaScript, Java, ..) ..?
How can I secure my application? do I set up js frameworks to secure it?
What kind of XSS vulnerability is it ?
- Reflected
How is it introduced and what is the context ?
- Introduced by modify my url
What Java frameworks are you using ?
Struts 1
XSS is performed by the HTML code, which was introduced by a third party and is performed by the application. In the following example to call added a postscript alert (1) . It was made on the application side.