Answered
The file image.js passes unvalidated data to an HTTP redirect function on line 485.
Product
AEM 6.5.2.LTS
Platform
Fortify
Steps to reproduce
Submit application to Fortify, and scan
The URL the client will be redirected to is read at val() in image.js on line 120.
The data is sent at open() in image.js on line 485.
AdChoices