https://wiki.owasp.org/index.php?action=history&feed=atom&title=ApEx%3AXSSApEx:XSS - Revision history2026-04-21T13:19:33ZRevision history for this page on the wikiMediaWiki 1.27.2https://wiki.owasp.org/index.php?title=ApEx:XSS&diff=46718&oldid=prevMjk303: New page: ==WIP 21/11/2008== ==Overview== ==Example== Create a Form on a table of type “Form on a Table with Report” Run the Report and create a row with this data in a VARCHAR2 column When y...2008-11-21T20:32:34Z<p>New page: ==WIP 21/11/2008== ==Overview== ==Example== Create a Form on a table of type “Form on a Table with Report” Run the Report and create a row with this data in a VARCHAR2 column When y...</p>
<p><b>New page</b></p><div>==WIP 21/11/2008==<br />
<br />
==Overview==<br />
<br />
==Example==<br />
Create a Form on a table of type “Form on a Table with Report”<br />
Run the Report and create a row with this data in a VARCHAR2 column<br />
<br />
When you press Create and branch back to the Report the JavaScript is run<br />
<br />
<br />
==Solution==<br />
Escape output, make the character as literal's<br />
<br />
In PL/SQL use this function: HTF.escape_sc<br />
Read about safe items in the User’s Guide</div>Mjk303