开发者

Struts 2 - XSS related question

开发者 https://www.devze.com 2023-03-24 08:59 出处:网络
I want to escape all outgoing content sent to the broswer. Unfortunately, it is not possible to add a tag and modify jsp\'s at this stage. I have an interceptor which can be modified. But I\'m not sur

I want to escape all outgoing content sent to the broswer. Unfortunately, it is not possible to add a tag and modify jsp's at this stage. I have an interceptor which can be modified. But I'm not sure how i can get hold of the Result as it is not yet generated, when the last interceptor runs.

Is there anyway to get hold of the content sent back to the browser, 开发者_JAVA技巧so that i can escape the content. It need not be an interceptor, all i want is to put this 'escaping' code to run on all outgoing content.


There are few issues taken care in latest release of strust2(2.3.1), i do not have much idea about XSS have look at the following issues may be they can give me some idea

XSS vulnerability in javatemplates plugin

Struts 2 XSS vulnerability

0

精彩评论

暂无评论...
验证码 换一张
取 消

关注公众号