This app was to be detected high risk issues as DOM Stored XSS by scanning software CHECKMARX.please refer to it..
I developed an app using JQuery mobile .
This app was to be detected high risk issues as DOM Stored XSS by scanning software CHECKMARX.please refer to it
var daily_news_class_list =
window.sessionStorage["daily_news_class_list"];
....
. $.getJSON(daily_news_class_list.replace("@categories",
encodeURI(Category.replace('Today's News', '')))
3874. .replace("@Start", 0)
I updated JQuery.mobile API version 1.4.2, the problem will still exist.
How can I solve this problem or whether the next version will fix this problem ?
Anybody know?