Forum Discussion
hatim1
Nimbostratus
NimbostratusXSS scripting / false positive
Hi all,
My ASM xss script tag (paramter) signature is falsely triggered due to the following value of a couple of parameters:
initfunc(true,false,'Mandatory Field','Value cannot ...
Hi,
It is probably possible to ask the web developers to change the code, however we can also try to help you with better configuration of that parameter on ASM, it may be very possible to reduce the risk of XSS condition to minimum with setting a few limits on the parameter itself, like length and allowed metachars or even a regexp that will describe the allowed value
Can you send us a few examples of the valid values to this parameter?
