Release Notes › Web Agent Release Notes › Defects Fixed › Defects fixed in r12.0 SP3 CR4 through CR7 › CSS Vulnerability with FCCs Corrected (CQ143044, 139648)
Symptom:
SiteMinder FCC URLs were vulnerable to cross-site-scripting.
Solution:
The values used by the BadFormChars agent configuration parameter were updated. This issue is fixed.
STAR Issue: 20340892:01