Input Validation on the fields to prevent cross site scripting attacks

Oracle Product: Siebel Call Center

Version: IP 22.5

Hi All,

We are trying to implement field level validation across all the date fields to prevent cross site scripting injection.

In the current set up, if we put a script on a date field with date picker - say for example(the below), the script executes.

</scrip</script>t><img src =q onerror=prompt(88)>

We want to implement a validation on all the date fields to prevent the script from executing.

Since there are a lot of date fields in our application, it is not possible to create PM/PR and implement input validation for all the fields with date picker.