Solution : https://service.sap.com/sap/support/notes/944279 (SAP Service marketplace login required)
Key words :
<script> var msg = 'abc'xyz', %><script> var msg = '<%javascript=<otr>, correct internal so2 format, update internal so2 format, <script> var msg = '<otr>, %><script> var msg = '<otr>, specific context <otr> sequences, valid print escape mechanism, break html/javascript code, usual escape mechanism
Related Notes :
| 995344 | BSP: Support javascript encoding for OTR alias texts |
| 891232 | BSP Security Relevant Changes |
| 887168 | BSP Page Directive <%@page forceEncode="html"%> & <%html=%> |