jQuery – XSS Vulnerability Under 3.5.0, When Using htmlPrefilter

Impact Area

Security

 

 

 

Severity

High

 

 

 

Affected Element

ServiceNow

UI Script

Salesforce

Static Resource

Rule number #

SN-JSL-001 (for ServiceNow)

SF-JSL-001 (for Salesforce)

Impact #

Increased vulnerability to cross-site scripting attacks.

Remediation #

Update jQuery to the latest version.

Time to fix #

30 min

References #

This rule is linked to Common Weakness Enumeration CWE-79 Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’).

QUALITY CENTER APP #

Instant quality scans right in your org.

Free on AppExchange. No Credit Card Required.

Was it helpful ?

THE AI CODE GOVERNANCE BRIEF

Sign up for new updates!