---
title: XSS Code Element List
description: Strings that, when found in the request, cause the agent to redirect the client to an error page.
component: java-agents
version: 2025.11
page_id: java-agents:properties-reference:org.forgerock.agents.xss.code.element.list
canonical_url: https://docs.pingidentity.com/java-agents/2025.11/properties-reference/org.forgerock.agents.xss.code.element.list.html
---

# XSS Code Element List

Strings that, when found in the request, cause the agent to redirect the client to an error page.

|                          |                                                                                                                                                                                                                                     |
| ------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Property name            | `org.forgerock.agents.xss.code.element.list`                                                                                                                                                                                        |
| Aliases                  | `org.forgerock.agents.xss.code.element.list`   Introduced in Java Agent 5.7`com.sun.identity.agents.config.xss.code.elements`   Introduced in Java Agent 5.0   [Recognized](preface.html#how_am_manages_multiple_aliases) from AM 6 |
| Function                 | Cross-site scripting                                                                                                                                                                                                                |
| Type                     | List                                                                                                                                                                                                                                |
| Bootstrap property       | No                                                                                                                                                                                                                                  |
| Required property        | No                                                                                                                                                                                                                                  |
| Restart required         | No                                                                                                                                                                                                                                  |
| Local configuration file | `AgentConfig.properties`                                                                                                                                                                                                            |
| AM console               | Tab: `Advanced`Title: `XSS Code Element List`Legacy title: `Possible XSS code elements`                                                                                                                                             |