ICEfaces
  1. ICEfaces
  2. ICE-2184

fortify scan PathDispatcher Cross Site Scripting

          Details

          • Type: Bug Bug
          • Status: Closed
          • Priority: Major Major
          • Resolution: Fixed
          • Affects Version/s: 1.7DR#1
          • Fix Version/s: 1.6.2, 1.7DR#2, 1.7
          • Component/s: Framework
          • Labels:
            None
          • Environment:
            ICEfaces

            Description

            A cross-site scripting attack is possible through the error message.

              Activity

              Repository Revision Date User Message
              ICEsoft Public SVN Repository #15022 Wed Oct 24 16:55:06 MDT 2007 ted.goddard Error messages echoed to the browser should not contain user input (ICE-2184)
              Files Changed
              Commit graph MODIFY /icefaces/branches/icefaces-1.6/icefaces/core/src/com/icesoft/faces/webapp/http/servlet/PathDispatcher.java
              Repository Revision Date User Message
              ICEsoft Public SVN Repository #14890 Thu Oct 04 16:11:30 MDT 2007 ted.goddard Error messages echoed to the browser should not contain user input (ICE-2184)
              Files Changed
              Commit graph MODIFY /icefaces/trunk/icefaces/core/src/com/icesoft/faces/webapp/http/servlet/PathDispatcher.java

                People

                • Assignee:
                  Unassigned
                  Reporter:
                  Ted Goddard
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  0 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: