[CMIS-943] Hardcoded Domain in HTML in repository.jsp

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: OpenCMIS 0.13.0
• Component/s: opencmis-client
• Assignee: Unassigned
• Reporter: Donald Kwakkel
• Created: 24/Aug/15 10:42
• Updated: 24/Aug/15 10:56
• Resolved: 24/Aug/15 10:50

Description

The file repository.jsp references a script using a hardcoded domain name on line 27. If attackers compromise the domain, they will have malicious code on this page.

Recommendation:

Keep control over the code your web pages invoke. Do not include scripts or other artifacts from third-party sites.