Timeline for How to prevent persistent XSS vulnerability with the Java Struts 1 Framework?
Current License: CC BY-SA 4.0
13 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 30, 2021 at 21:43 | history | protected | CommunityBot | ||
| Sep 29, 2018 at 6:01 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Aug 30, 2018 at 5:01 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jul 31, 2018 at 5:00 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jul 1, 2018 at 4:39 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| May 31, 2018 at 21:43 | comment | added | grf2018 | The code I posted is on the JSP page. When you submit calls an action controller. The script in the text field in the image executes when you submit the form, and then displays the alert. I don’t know which code you’re refering to. | |
| May 31, 2018 at 21:31 | comment | added | Anders | Can you show us the code where the injected value is printed into the page (after you submit)? That's the relevant code. | |
| May 31, 2018 at 21:29 | history | edited | Anders | CC BY-SA 4.0 |
edited title
|
| May 31, 2018 at 19:52 | answer | added | Aulis Ronkainen | timeline score: 1 | |
| May 31, 2018 at 19:46 | comment | added | dandavis | a CSP would help to mitigate if you can't update the app logic. | |
| May 31, 2018 at 18:29 | history | edited | grf2018 |
edited tags
|
|
| May 31, 2018 at 18:23 | review | First posts | |||
| May 31, 2018 at 19:38 | |||||
| May 31, 2018 at 18:23 | history | asked | grf2018 | CC BY-SA 4.0 |