SAP Web Application Server crossite scripting

Crossite scripting with /sap/bc/gui/sap/its/webgui/...