Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 353272 - JAX-RPC Sample JSP generator should produce Web samples that are not vulnerable to XSS
Summary: JAX-RPC Sample JSP generator should produce Web samples that are not vulnerab...
Status: RESOLVED FIXED
Alias: None
Product: WTP Webservices
Classification: WebTools
Component: jst.ws (show other bugs)
Version: 3.3   Edit
Hardware: PC Windows XP
: P3 normal (vote)
Target Milestone: 3.3.1   Edit
Assignee: Ivan Castro CLA
QA Contact: Keith Chong CLA
URL:
Whiteboard:
Keywords:
Depends on: 353269 353273
Blocks:
  Show dependency tree
 
Reported: 2011-07-27 23:10 EDT by Keith Chong CLA
Modified: 2011-08-22 23:22 EDT (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Keith Chong CLA 2011-07-27 23:10:29 EDT 
+++ This bug was initially created as a clone of Bug #353269 +++

It is possible to enter Javascript in the input pane and have it executed when the form is submitted.   The JAX-RPC generator should be updated to prevent this.


Check in for 3.3.x
Comment 1 Keith Chong CLA 2011-08-22 23:22:35 EDT 
Released to WTP 3.3.1.