Forum Discussion

nbaum_306129's avatar
nbaum_306129
Icon for Nimbostratus rankNimbostratus
Aug 10, 2017

Cross Site Scripting Policy

Does anyone have any templet policies that i can use to help fix cross site scripting?

 

ASM Advanced WAF
security
  • cjunior's avatar
    cjunior
    Icon for Nacreous rankNacreous
    Aug 10, 2017

    Hello, just adding the specific attack signatures set to the policy (e.g. Cross Site Scripting Signatures), works for you?

     

    Regards.

     

  • Piotrek_72347's avatar
    Piotrek_72347
    Icon for Nimbostratus rankNimbostratus
    Feb 28, 2018

    you need to configure several thing to mitigate Cross site scripting

     

    Attack signatures (“Cross Site Scripting (XSS)”) Parameter meta characters HttpOnly cookie attribute enforcement Parameter type definitions (such as integer)