10031 10031 User Controllable HTML Element Attribute (Potential XSS) User Controllable HTML Element Attribute (Potential XSS) 0 1 Informational (Low) Low <p>This check looks at user-supplied input in query string parameters and POST data to identify where certain HTML attribute values might be controlled. This provides hot-spot detection for XSS (cross-site scripting) that will require further review by a security analyst to determine exploitability.</p> http://127.0.0.1:8080/govwayConsole/configurazioneGenerale.do?configCaches=yes http://127.0.0.1:8080/govwayConsole/configurazioneGenerale.do (configCaches) GET configCaches User-controlled HTML attribute values were found. Try injecting special characters to see if XSS might be possible. The page at the following URL: http://127.0.0.1:8080/govwayConsole/configurazioneGenerale.do?configCaches=yes appears to include user input in: a(n) [input] tag [value] attribute The user input found was: configCaches=yes The user-controlled value was: yes 1 false <p>Validate all input and sanitize output it before writing to any HTML attributes.</p> <p>User-controlled HTML attribute values were found. Try injecting special characters to see if XSS might be possible. The page at the following URL:</p><p></p><p>http://127.0.0.1:8080/govwayConsole/configurazioneGenerale.do?configCaches=yes</p><p></p><p>appears to include user input in:</p><p>a(n) [input] tag [value] attribute</p><p></p><p>The user input found was:</p><p>configCaches=yes</p><p></p><p>The user-controlled value was:</p><p>yes</p> <p>https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html</p> 20 20 578 Info Informational insight.network.failure Percentage of network failures 1 Info Informational http://127.0.0.1:8080 insight.code.2xx Percentage of responses with status code 2xx 58 Info Informational http://127.0.0.1:8080 insight.code.3xx Percentage of responses with status code 3xx 7 Info Informational http://127.0.0.1:8080 insight.code.4xx Percentage of responses with status code 4xx 32 Info Informational http://127.0.0.1:8080 insight.code.5xx Percentage of responses with status code 5xx 1 Info Informational http://127.0.0.1:8080 insight.endpoint.ctype.image/gif Percentage of endpoints with content type image/gif 1 Info Informational http://127.0.0.1:8080 insight.endpoint.ctype.image/png Percentage of endpoints with content type image/png 4 Info Informational http://127.0.0.1:8080 insight.endpoint.ctype.image/x-icon Percentage of endpoints with content type image/x-icon 1 Info Informational http://127.0.0.1:8080 insight.endpoint.ctype.text/css Percentage of endpoints with content type text/css 6 Info Informational http://127.0.0.1:8080 insight.endpoint.ctype.text/html Percentage of endpoints with content type text/html 72 Info Informational http://127.0.0.1:8080 insight.endpoint.ctype.text/javascript Percentage of endpoints with content type text/javascript 6 Info Informational http://127.0.0.1:8080 insight.endpoint.method.GET Percentage of endpoints with method GET 66 Info Informational http://127.0.0.1:8080 insight.endpoint.method.POST Percentage of endpoints with method POST 33 Info Informational http://127.0.0.1:8080 insight.endpoint.total Count of total endpoints 195 Info Informational http://127.0.0.1:8080 insight.response.slow Percentage of slow responses 25 Info Informational https://consent.cookiebot.com insight.code.2xx Percentage of responses with status code 2xx 100 Info Informational https://consent.cookiebot.com insight.response.slow Percentage of slow responses 40 Info Informational https://consentcdn.cookiebot.com insight.code.2xx Percentage of responses with status code 2xx 100 Info Informational https://fonts.googleapis.com insight.code.2xx Percentage of responses with status code 2xx 100 Info Informational https://js-eu1.hs-scripts.com insight.code.2xx Percentage of responses with status code 2xx 100 Info Informational https://link.it insight.code.3xx Percentage of responses with status code 3xx 100 Info Informational https://pagead2.googlesyndication.com insight.code.2xx Percentage of responses with status code 2xx 100 Info Informational https://region1.google-analytics.com insight.code.2xx Percentage of responses with status code 2xx 100 Info Informational https://www.googletagmanager.com insight.code.2xx Percentage of responses with status code 2xx 100 Info Informational https://www.googletagmanager.com insight.response.slow Percentage of slow responses 100 Info Informational https://www.link.it insight.code.2xx Percentage of responses with status code 2xx 100 Info Informational https://www.link.it insight.response.slow Percentage of slow responses 4