onPremise XSS issue with 4.2.6 mobilebanking

HCL Volt MX Volt MX Forum
4

@Chloe Muwwvy​ Please try disabling HTTP Public key pinning ( enabled by default and pinned to konycloud. )

Follow the below steps to disable it.

  1. delete line networktrustconfig = Allow Pinned In file <VisualizerWorkSpace>/konymobilebanking/androidbuild.properties. This will disable Pinning for android.
  2. change "KonyHTTPPublicKeyPinning":true to "KonyHTTPPublicKeyPinning":false in file konymobilebanking/resources/mobile/native/iphone/infoplist_configuration.json
  3. After this changes, open the project in Visualizer and recheck that HTTP pinning is disabled by navigating
  • Project Settings->Native->iPhone/iPad/Watch Tab . In section "Platform Settings" value of Kony HTTP Public Key Pinning should be false..
  • Project Settings->Native->Android, Verify that "Network Trust Config" is set to None.