Cross-Site Scripting: Reflected

[QiAnXinCodeSafe]

wc-devops-utilities/scripts/commerce/triggerBuildIndex.py

Lines 25 to 30 in d813126

	ts_url = "https://"+args.tenant_id+args.environment+args.envtype+"ts-app."+args.namespace+".svc.cluster.local:5443/wcs/resources/admin/index/dataImport/build?masterCatalogId="+args.masterCatalogId
	ts_auth = HTTPBasicAuth(args.spiuser, args.spipwd)
	ts_r = requests.post(url=ts_url, data={}, auth=ts_auth, verify=False)
	print(ts_r)

Sending unvalidated data to a web browser can result in the browser executing malicious code.