3729822 - RMK Site Security - HTML Injection - Recruiting Marketing

Third Party security scan report Content Injection issue, that can be found in the keyword search.

SAP SuccessFactors Recruiting Marketing

Add special character (* `&` * `<` * `>` * `'` * `'` * `/`), in the keyword search.
You will see them injected and parsed in the response page URL.

Expected behavior

To display the search keyword in the response is not a content injection issue, but an expected behavior 
According to our security team, this behavior doesn't influence the system and is not a security concern.

RMK, Security, content, injection, parsing, html , KBA , LOD-SF-RMK-PSI , Security , LOD-SF-RMK-SEC , Security & Vulnerabilities , How To