Web Agent Guides › Web Agent Configuration Guide › Help Prevent Attacks › Configure the Web Agent to Check For Cross Site-Scripting

Configure the Web Agent to Check For Cross Site-Scripting

To instruct the Web Agent to check a URL for characters that may be part of an executable script, set the CSSChecking parameter to yes. By enabling this parameter, the Web Agent scans a full URL, including the query string, for escaped and unescaped versions of the following default character set:

• left and right angle brackets (< and >)
• single quote (')