Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 353272

Summary:	JAX-RPC Sample JSP generator should produce Web samples that are not vulnerable to XSS
Product:	[WebTools] WTP Webservices	Reporter:	Keith Chong <keith.chong.ca>
Component:	jst.ws	Assignee:	Ivan Castro <ivanc>
Status:	RESOLVED FIXED	QA Contact:	Keith Chong <keith.chong.ca>
Severity:	normal
Priority:	P3
Version:	3.3
Target Milestone:	3.3.1
Hardware:	PC
OS:	Windows XP
Whiteboard:
Bug Depends on:	353269, 353273
Bug Blocks:

Description Keith Chong

2011-07-27 23:10:29 EDT

+++ This bug was initially created as a clone of Bug #353269 +++

It is possible to enter Javascript in the input pane and have it executed when the form is submitted.   The JAX-RPC generator should be updated to prevent this.


Check in for 3.3.x

Comment 1 Keith Chong

2011-08-22 23:22:35 EDT

Released to WTP 3.3.1.