Forum OpenACS Development: Re: XSS / Reflection with return_url

Collapse
4: Re: XSS / Reflection with return_url (response to 3)
Posted by Frank Bergmann on 05/01/20 10:16 AM
Funny, I also just installed ZAP last night.

I tried, but so far I wasn't able to reproduce the known return_url reflection issue in this thread. I'll continue to investigate.

Cheers
Frank

Collapse
5: Re: XSS / Reflection with return_url (response to 4)
Posted by Maurizio Martignano on 05/01/20 10:51 AM
Well, in the report I sent you "return_url" appears 293 times.
So that report could provide you some additional information.

Hope it helps,
Maurizio