Question Regarding Callback

rkumar11

Hi,

I am using datatables for our in-house database. My question is more specific to Cross-Site Scripting issue with server_processing_oracle.php. This has been reported as security vulnerability for XSS. Appscan successfully embedded a script in the response when injected into the value of parameter 'Callback'. Cleaning of potential characters has been added to this script. We typed caste the sEcho parameter to intval. I am not sure why still reporting as security vulnerability. Any help in this regard will be highly appreciated.

Thanks,
Raina