From cb8096f636ad0b1a44acc8044dda8719299287eb Mon Sep 17 00:00:00 2001 From: Chris Smowton Date: Tue, 14 Sep 2021 11:32:22 +0100 Subject: [PATCH] Remove JSF XSS Example Per previous commit, no need for a top-level JSF example --- java/ql/src/Security/CWE/CWE-079/XSS.qhelp | 9 --------- 1 file changed, 9 deletions(-) diff --git a/java/ql/src/Security/CWE/CWE-079/XSS.qhelp b/java/ql/src/Security/CWE/CWE-079/XSS.qhelp index b010a5918eb..428b44c8db9 100644 --- a/java/ql/src/Security/CWE/CWE-079/XSS.qhelp +++ b/java/ql/src/Security/CWE/CWE-079/XSS.qhelp @@ -23,15 +23,6 @@ leaving the website vulnerable to cross-site scripting.

- - - - -

The following example shows the page parameter being written directly to a custom JSF renderer -of UI components, which leaves the website vulnerable to cross-site scripting.

- - -