Cross site Vulnerability in Apache2.2.11

2015-03-31 Thread D, Dwarakesh
Hello, One of our application is running on Tomcat and the requests are being redirected by Apache to Tomcat. When we did vulnerability scan for that application, we have encountered Cross-site scripting vulnerability. For remediating this, I have added below snippet in httpd.conf file and did

Re: Cross site Vulnerability in Apache2.2.11

2015-03-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dwarak, On 3/31/15 5:27 AM, D, Dwarakesh wrote: One of our application is running on Tomcat and the requests are being redirected by Apache to Tomcat. Do you mean proxied and not redirected? When we did vulnerability scan for that