Cross-Site Scripting DOM Input Validation and Representation

Question

Rohit272 opened this issue 5 years ago · comments

Hi,
We are using vis.js 4.20.1, on running the Fortify scan tool, We got the following error at:
vis.min.js, line 29 (Cross-Site Scripting: DOM)

Issue Details
Kingdom: Input Validation and Representation
Scan Engine: SCA (Data Flow).

Is there any workaround or fix that can be applied here.

Thanks

Alexander Wunschik · Answer 1 · Thu May 02 2019 20:05:10 GMT+0800 (China Standard Time)

We are using vis.js 4.20.1, on running the Fortify scan tool, We got the following error at:
vis.min.js, line 29 (Cross-Site Scripting: DOM)

Can you please scan the non-minified version ' vis.js' and provide more details about the security problem.