Answer the question
In order to leave comments, you need to log in
Question for bitrix programmers: how did you solve problems with Cross-Site Scripting?
Launched a security scanner that revealed problems of this kind
Cross-Site Scripting
File: /home/bitrix/ext_www/sitename/bitrix/templates/market_column_1/bxready/library/elements/ecommerce_v1/element.php
303: echo $_COOKIE['_ym_uid']
Необходимые условия:
90: if($arElement['IBLOCK_SECTION_ID'] !== "869")
Аналогично:
311: echo $_COOKIE['_ym_uid']
319: echo $_COOKIE['_ym_uid']
Answer the question
In order to leave comments, you need to log in
You are parsing a third party custom template, not the core, so the question should be addressed to them.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question