> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Xssrequestwrapper is insecure

<AccordionGroup>
  <Accordion title="xssrequestwrapper-is-insecure">
    It looks like you're using an implementation of XSSRequestWrapper from dzone. ([https://www.javacodegeeks.com/2012/07/anti-cross-site-scripting-xss-filter.html](https://www.javacodegeeks.com/2012/07/anti-cross-site-scripting-xss-filter.html)) XSS vulnerabilities occur when untrusted input executes malicious JavaScript code, leading to issues such as account compromise and sensitive information leakage. The XSS filtering in this code is not secure and can be bypassed by malicious actors. It is recommended to use a stack that automatically escapes your view or templates instead of filtering yourself.<br />**Likelihood**: LOW<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    <br />**OWASP**: <br />- A07:2017 - Cross-Site Scripting (XSS)
    <br />- A03:2021 - Injection
  </Accordion>
</AccordionGroup>