2

I'm using WSO2 API MANAGER VERSION 1.10.0

Sample API published with script description in publisher portal

enter image description here

and i open the api detail in store portal

enter image description here

setting carbon.xml is below 

<XSSPreventionConfig>
     <Enabled>true</Enabled>
     <Rule>allow</Rule>
     <!--Patterns>
         <Pattern></Pattern>
     </Patterns-->
</XSSPreventionConfig>

How can I solve it with setting?

Bee
  • 12,251
  • 11
  • 46
  • 73
raekwon.ha
  • 107
  • 10

1 Answers1

1

You can download security patches for APIM 1.10.0 from here. This is already fixed in them.

Bee
  • 12,251
  • 11
  • 46
  • 73
  • Here is a part of the fixes. https://github.com/wso2/carbon-apimgt/pull/1565/files Other fixes are in the same code base. Please note APIM 2.0.0 has more such security fixes. – Bee Oct 26 '16 at 15:57