Federation Manager Release Notes › New Features in Federation Manager r12.1 SP3 › Java Server Pages that Check for Cross-site Scripting

Previous Topic: New Setting to Secure the IdP Discovery Target

Next Topic: Changes to Existing Features

Java Server Pages that Check for Cross-site Scripting

Federation Manager provides several Java Server Pages (JSPs) for use with federation functionality. JSPs check characters in a request to be sure that unsafe information in the output stream is not displayed in the browser. This check prevents against cross-site scripting attacks.