I have the following script.
function submitAsPost(url){
if(url === "oneUrl" || url === "AnotherUrl")
{
var f = document.forms[0];
f.action=url
f.method='post'
f.submit();
}
}
I am trying to get appscan to lesson the vulnerability. Since the parameters are different and significant, I don't want to validate each one. The current Vulnerability is Insecure Use Of Form.Action Is there a easy way to mitigate this? I guess just validating the URL string doesn't work.