[DuraSpace JIRA] (DS-4584) Cross site scripting

[Jaime Solorzano (LYRASIS JIRA)]

Jaime Solorzano created an issue

DSpace / DS-4584 Cross site scripting Issue Type: Bug Affects Versions: 6.3 Assignee: Unassigned Created: 08/Jun/21 4:35 PM Environment: Linux Ubuntu server 16.04 / Postgres 9 Priority: Critical Reporter: Jaime Solorzano Apply context-dependent encoding and / or validation to user input rendered on a page Set the HttpOnly flag for cookies. With this you will not be able to access these cookies through JavaScript on the client side. Configure the CSP security header Add Comment

This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97)

[Mark H. Wood (LYRASIS JIRA)]

Mark H. Wood commented on DS-4584

Re: Cross site scripting Are there specific places where this should have been done, but it was not?

Add Comment