Cross-Site Scripting: Reflected

[QiAnXinCodeSafe]

elide/elide-spring/elide-spring-boot-autoconfigure/src/main/java/com/yahoo/elide/spring/controllers/SwaggerController.java

Line 84 in 6806068

public ResponseEntity<String> list(@PathVariable("name") String name) {

elide/elide-spring/elide-spring-boot-autoconfigure/src/main/java/com/yahoo/elide/spring/controllers/SwaggerController.java

Line 89 in 6806068

return ResponseEntity.status(404).body("Unknown document: " + name);

Sending unvalidated data to a web browser can result in the browser executing malicious code.

[aklish]

Fixed in #1221