I can see below description in security report:
The most effective solution for Cross Site Scripting vulnerabilities is HTML Encoding of User Affected Output.
The application should encode any output containing values that originate directly from user input, from values that might have been affected by the user, from user-affected data repository values (database, log, files, etc) or from any other information which could have been affected by the user. request {"number":"10",result:"Hello"} response {"error":"10":"message":"Already present", errorcode:"406"} Since 10 is flowing through request to response, looks like it is security threat and getting above vulnarability. Anyone please suggest the solution plz? Thanks in advance.