secDevLabs
secDevLabs copied to clipboard
A3 - Injection - SSType
This solution refers to which of the apps?
A3 - Injection - SSType
What did you do to mitigate the vulnerability?
To resolve the vulnerability it is necessary to change the way a variable is declared in html. The variable has been surrounded by double curly braces so that its content is considered a string.
Did you test your changes? What commands did you run?
I tested the attacks given in the problem and could not reproduce the same errors.