Home/ Questions/Q 7673171
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-31T16:26:59+00:00

In my application , a HTTP GET request URL to the application with script

  • 0

In my application , a HTTP GET request URL to the application with script tag is getting redisplayed as it is although it fails the authorization.

Example: http://www.example.com/welcome<script>alert("hi")</script>

The issue is sanitizing external input entered directly into address bar by modifying existing GET URL.
Spring redisplays the submitted URL as it is.

Though the script does not get executed in the browser(FF), is there anyway to strip the URL of these values before displaying it back to the user

Reference: Spring MVC application filtering HTML in URL – Is this a security issue?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    @Raghav..this link might help you Spring – Rewrite one URL to another, this talks about a library for url rewriting which is outside spring..but can be configured easily with spring it seems.

    • 0