JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22. Read more