Lightbox2 Cross Site Scripting

Bharani Kumar <[email protected]>
Newsgroups gmane.comp.php.drupal.support
Message-ID <CA+6dBGfSwtXm6CzS0RpAatdY_jU=1A5huATCt8f1f_gm-2AjZQ@mail.gmail.com>
Hi Drupal folk,

      can you please advise the solution for the Cross Site Scripting
problem.
OWASP ZAP Testing Tool produced XSS error in the following location.

URL: example.com/sites/javascript:alert(1);/modules/lightbox2/js
<http://example.com/sites/javascript:alert%281%29;/modules/lightbox2/js>
Parameter: all

Thanks in advance for your help


Regards
Bharani

-- 
[ Drupal support list | http://lists.drupal.org/ ]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.