SAP Note 1340457 - Security Note: Encoding fix for technical hidden fields

Component : Tag Library - Tag Library

Solution : https://service.sap.com/sap/support/notes/1340457 (SAP Service marketplace login required)

Key words :
terms thtmlb xss input hidden javascript js request script scripting site cross security reason, execute javascript code found, request parameters, hidden fields, javascript code, decode complex strings, working attack vector, webcuif based applications, attached correction instructions, sap web ui

Related Notes :

888889Automatic checks for security notes using RSECNOTE