# Cross site scripting

**URL:** <https://discourse.hibernate.org/t/cross-site-scripting/5071>\
**Category:** Miscellaneous\
**Created:** [February 17, 2021, 1:50am UTC](https://discourse.hibernate.org/t/cross-site-scripting/5071 "2021-02-17T01:50:33Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tester123](https://yyz1.discourse-cdn.com/flex035/user_avatar/discourse.hibernate.org/tester123/32/1394_2.png) [@tester123](https://discourse.hibernate.org/u/tester123)\
**Post date:** [February 17, 2021, 1:50am UTC](https://discourse.hibernate.org/t/cross-site-scripting/5071/1 "2021-02-17T01:50:33Z")

</div>

Hi

I am using fortify to scan vulnerabilities and I need help sanitize the data

I am getting the vulnerability reference at the following gcode segment :

Return new responseentity(this, httpstatus)

Please advise

---

<div class="post-metadata">

**Author:** ![sanepunk](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@sanepunk](https://discourse.hibernate.org/u/sanepunk)\
**Post date:** [June 21, 2021, 6:54am UTC](https://discourse.hibernate.org/t/cross-site-scripting/5071/2 "2021-06-21T06:54:50Z")

</div>

Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user. Flaws that allow these attacks to succeed are quite widespread and occur anywhere a web application uses input from a user within the output it generates without validating or encoding it.[.](https://jiofilocalhtml.run)[.](https://forpc.onl/)