SmartClient - Cross-Site Scripting: DOM vulnerabilities reported by static scan

[reachsidhu]

Hello we use the below version of Smartclient

SmartClient Version: v10.0p_2016-02-12/LGPL Development Only (built 2016-02-12)

We submitted our source code for static scan and got the below results back

ISC_History.js(ISC_History.js) - Line No- 73
ISC_History.js(ISC_History.js) - Line No- 73
ISC_RealtimeMessaging.js (ISC_RealtimeMessaging.js)- Line No-33
ISC_RealtimeMessaging.js (ISC_RealtimeMessaging.js)- Line No-33

Please let us know how to get about this

[Isomorphic]

Scanners produce spurious results. If you think any of these represent actual exploitable flaws, please put together a working exploit and we'll take a look.