This repository has been archived by the owner on Jul 29, 2019. It is now read-only.

Cross-Site Scripting DOM Input Validation and Representation #4290

Open

Rohit272 opened this issue May 2, 2019 · 1 comment

Rohit272 commented May 2, 2019

Hi,
We are using vis.js 4.20.1, on running the Fortify scan tool, We got the following error at:
vis.min.js, line 29 (Cross-Site Scripting: DOM)

Issue Details
Kingdom: Input Validation and Representation
Scan Engine: SCA (Data Flow).

Is there any workaround or fix that can be applied here.

Thanks

Member

mojoaxel commented May 2, 2019

We are using vis.js 4.20.1, on running the Fortify scan tool, We got the following error at:
vis.min.js, line 29 (Cross-Site Scripting: DOM)

Can you please scan the non-minified version ' vis.js' and provide more details about the security problem.

mojoaxel added the Problem label

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.