Cross-Site Scripting error when deleting a tag or tag set in eDiscovery version 10.1.1

book

Article ID: 100053315

calendar_today

Updated On:

Description

Error Messages

Error 1 - User interface pop-up.

Cross-Site Scripting Detected

Error 2 - Server.yyyy-mm-dd.log

ERROR [ui.servlet.XSSFilter] (https-jsse-nio2-443-exec-2:[]) [#60016] XSS Content Detected in request parameter: detail containing string:

Cause

Cross-Site Scripting detection and resolution was added to the code.  Development is correcting the 'false' pop-up of the Cross-Site Scripting detection when reported and the resolution is placed in future releases of the product. 
 

Resolution

There are no plans to address this issue by way of a patch or hotfix in earlier versions of the software at the present time.  However, the issue has been addressed in the revision of the product specified at the end of this article. 
 
Please contact your Veritas Sales representative or the Veritas Sales group for upgrade information including upgrade eligibility to the release containing the resolution for this issue.

This issue is resolved in version 10.1.2.

Issue/Introduction

When a user attempts to delete an tag in an unused tag set, a pop-up will appear in the user interface with the error below in Error 1 and the tag cannot be removed. Deleting an unused tag set does not present the pop-up in the user interface, but the tag set cannot be deleted. The server log of the case home will contain the error below in Error 2 for both instances.

Error Messages