Security vulnerability in javascript_tabs.jsp

재웅 최

HI

During a security check to introduce Crowd to the company, "var totalTabs of javascript_tabs.jsp ='<%= request.getParameter("totalTabs") %>';" A security vulnerability was pointed out in the phrase. I will ask you what role this part does and if it can be changed.

What emerged as a security vulnerability was cross-site scripting.

 

Thank you

Nic Brough -Adaptavist-

That is trying to get a list of tabs.  It does not appear to have any security problems.