Skip to main content
XiaoyuLi
Jul 18, 2024 8:14 AM UTC
Solved

how to prevent xdd attack to childlist selector in AEM?

I'm having an issue to block xss attacks to childlist selector:

I've tried adding several stuff in dispatcher.any and httpd.conf, to block the url or redirect to somewhere else, but nothing works.

 

this issue remains:

in the response header, the content-type is text/html

any ideas how to deal with this?
This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Lokesh_Vajrala
Lokesh_VajralaAccepted solution
Community Advisor
Jul 19, 2024 2:45 AM UTC

Hi @xiaoyuli 

 

You can try this filter 

{ /type "deny" /path "/etc/designs/xh1x" /selectors "childrenlist" /extension "json" /method "GET" }

 

There are these new elements /path, /selectors, /extension, and /suffix in filters, which can be used to further control the behaviour. 

 

Thanks,

Lokesh 

View in thread

1 reply

Lokesh_Vajrala
Community Advisor
Lokesh_VajralaCommunity AdvisorAccepted solution
Community Advisor
Jul 19, 2024 2:45 AM UTC

Hi @xiaoyuli 

 

You can try this filter 

{ /type "deny" /path "/etc/designs/xh1x" /selectors "childrenlist" /extension "json" /method "GET" }

 

There are these new elements /path, /selectors, /extension, and /suffix in filters, which can be used to further control the behaviour. 

 

Thanks,

Lokesh 

Translate
    Terms & ConditionsAccessibility statement

    Loading footer...