MadCap Software Forums

HI,
I have a security issue.

We did a Vericode scan and the scan showed that the online documentation threw 27 Cross-Site Scripting errors. They all dealt with one javascript file which contains a JQuery cookie reference. We believe it’s the JQuery cookie reference that’s causing the Cross-Site Scripting errors.

Have you seen this issue? Can it be resolved?

Thanks,
Cynthia Didio

What version of Flare are you using? The latest update (Flare 2018 r2), which came out a few days ago, apparently has fixed something having to do with security.

Release notes are here: [url]https://kb.madcapsoftware.com/Content/F ... s.htm//url]

A number of the bug fixes address cross-site scripting.

HTH

Nita,
I am using doc-2-help 2014 not Flare. Is this a known issue that can be fixed?
Thanks,
Cynthia Didio

Oh, I’m sorry. I wasn’t paying attention...

I actually have no idea about Doc-To-Help and suggest that you take this up with MadCap tech support, if you’re able.

Nita,
Please provide the tech support number. I appreciate it.

Cynthia Didio

Hi,

I suggest to do a test with current DocToHelp Version i.e. V5. I assume it doen't matter when you try it with a test Installation, best on another machine.

Hi,

I suggest to do a test with current DocToHelp Version i.e. V5. I assume it doen't matter when you try it with a test Installation, best on another machine.

Nita,
Please just send me the tech support number. I will work with them. I appreciate it.

You may find the phone number here….
https://www.doctohelp.com/support/contact-options.aspx
And I'm sorry for my duplicated last reply.

Nita,
Thank you for sending the information!

Thank Sabine, not me! She’s our resident DocTo-Help guru.