wso2 api manager have xss issue

2
votes

I'm using WSO2 API MANAGER VERSION 1.10.0

Sample API published with script description in publisher portal

enter image description here

and i open the api detail in store portal

enter image description here

setting carbon.xml is below 

<XSSPreventionConfig>
     <Enabled>true</Enabled>
     <Rule>allow</Rule>
     <!--Patterns>
         <Pattern></Pattern>
     </Patterns-->
</XSSPreventionConfig>

How can I solve it with setting?

1
wso2xsswso2-amapi-manager

1 Answers

1
votes

You can download security patches for APIM 1.10.0 from here. This is already fixed in them.