Solution : https://service.sap.com/sap/support/notes/1275278 (SAP Service marketplace login required)
Key words :
cross-site scripting, missing html encoding, malicious code reason, user enters, javascript code, http filter, dangerous content, inputfield tooltip, javascript, conditions
Related Notes :
1530970 | Double-encoding of tooltips |
888889 | Automatic checks for security notes using RSECNOTE |