Security vulnerability in javascript_tabs.jsp

[재웅 최]

HI

During a security check to introduce Crowd to the company, "var totalTabs of javascript_tabs.jsp ='<%= request.getParameter("totalTabs") %>';" A security vulnerability was pointed out in the phrase. I will ask you what role this part does and if it can be changed.

What emerged as a security vulnerability was cross-site scripting.

Thank you

[Nic Brough -Adaptavist- · Accepted solution]

That is trying to get a list of tabs.  It does not appear to have any security problems.

[재웅 최]

thank you