lang:

JSP

regex:

\<\%=\s*request\.getParameter\(

description:

Possible Cross Site Scripting via request object in JSP
tags:
xss
results