Thanks for the reply. I have implemented the XSS api in JSP and in JAVA. I have issue in Javascript as well EX: window.document.referrer; whoul be validated for Client DOM XSS.
What can be implemented here in JS file can you please suggest.
The approach to XSS protection is "CQ applies the principle of filtering all user-supplied content upon output." What use case are you trying to protect against?
Thanks for the reply . In my java script code I have var x = window.document.referrer; there is some tool to validate all the security issues.
for the this code : var x = window.document.referrer; The tool says hacker can include the script in the url while accessing which is a security issue.
I am unable to implement the any fix to encode the url and then store it the variable x.
What can be done in java script to encode the url to get ride of script inclusion.
You can use regular expression in javascript to replace all the tags ( like <html>,<p>,<script>) with null ("") before assigning it to a variable. I think there is no OOTB implementation for this.
