rsubramani130358 (Community Member) asked a question.
Reason for getting Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Private Sub btnAddZipCode_Click(sender As Object, e As EventArgs) Handles btnAddZipCode.Click
If Not String.IsNullOrEmpty(txtZipCode.Text) Then
Dim _inspectorAssignmentsData = New InspectorAssignmentsBO
Dim row As InspectorAssignmentsDataset.InspectorAssignmentsRow
row = _inspectorAssignmentsData.NewRow()
row.InspectorKey = NavigationCmd.PrimaryKey
row.ZipCode = txtZipCode.Text
If trySave(_inspectorAssignmentsData, row, vsSummary) Then
InspectorsData.Data.Clear()
InspectorsData.Load(NavigationCmd.PrimaryKey, False, False)
LoadZipCodes()
txtZipCode.Text = ""
.png){kind=logo}
Hi @rsubramani130358 (Community Member),
Generally, Veracode Static Analysis reports XSS when data from outside the application (such as an HTTP request, the database, or the files system) is sent outside the application. The concern is that if the data is sent to a web browser, an attacker might be able to inject malicious JavaScript which could be rendered and executed in the web browser of a victim.
Could you please provide more information on the line of code XSS is reported on here as well as additional information from the Flaw Details in the Triage Flaws view that could help further triage this?
Thank you,
Florian Walter