Laravel PHPscript soft rejected for XSS. Need help

Envato Authors CodeCanyon
1

Hey Guys,

I seek your help. i am uploading my first php script based on laravel framework for Classified ads.

Its been soft rejected continuously for XSS.
Msg:

  1. Sorry, but again, your application is insecure: https://envato.d.pr/3fJ495

Demo : https://ashva.iqonic.design

I checked the link in online vulnerability scanners and its all green.

I need help to understand how reviewers test scripts for XSS. Which tool do they use ?
So that i can use it can fix the issue.

Any help, hints, solution is highly appreciated.
Thanks in advance. Keep Creating. Cheers.

2

Hi

Assuming reviewer focused on sanitize your input. To keep yourself safe from XSS, you must sanitize your input. Your application code should never output data received as input directly to the browser without checking it for malicious code.

Thanks

3

Hey thanks for the feedback.
I’ll verify my inputs once again

1 Like