Symptom:
XSS is not blocked if the BadCSSChars string is multiple characters and one character has multiple encodings.
Solution:
This is no longer an issue. The decoded URL is now compared against multiple character strings specified in BadCSSChars to block XSS.
STAR Issue: 20405501-1
|
Copyright © 2012 CA.
All rights reserved.
|
|