XSS vulnerability in java
<ol>
<li><p>How to fix the below XSS vulnerability issue?</p>

<p>How to secure my website from XSS vulnerability?</p></li>
</ol>

<p>By adding a javascript in the URL of the website all the cookies values are being displayed. </p>

<p>below is a similar example of the URL which consists of a java script:</p>

<p><a href="https://www.example.com/" rel="nofollow">https://www.example.com/</a>>&lt; script>alert(document.cookie)&lt; / script >&amp;UserTarget=<a href="https://www.example.com/homepageredirect.jsp" rel="nofollow">https://www.example.com/homepageredirect.jsp</a> </p>

<p>To overcome this I added the below filer in obj.conf file in webserver 7.0:</p>

<hr>

<pre><code>Input fn="insert-filter"

method="POST"

filter="sed-request"

sed="s/(&lt;|%3c)/\\&lt; / gi"

sed="s/(&gt;|%3e)/\\&gt;/gi"
</code></pre>

<hr>

<p>Ever after making these changes in the obj.conf , still the issue is not fixed. Please suggest something.</p>
