开发者

Struts 2 - XSS related question

I want to escape all outgoing content sent to the broswer. Unfortunately, it is not possible to add a tag and modify jsp's at this stage. I have an interceptor which can be modified. But I'm not sure how i can get hold of the Result as it is not yet generated, when the last interceptor runs.

Is there anyway to get hold of the content sent back to the browser, 开发者_JAVA技巧so that i can escape the content. It need not be an interceptor, all i want is to put this 'escaping' code to run on all outgoing content.


There are few issues taken care in latest release of strust2(2.3.1), i do not have much idea about XSS have look at the following issues may be they can give me some idea

XSS vulnerability in javatemplates plugin

Struts 2 XSS vulnerability

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜