Top 10 2017-A7-Insufficient Attack Protection

'Top 10-2017-RC1 A7-Insufficient Attack Protection' has been rejected
 * 1) REDIRECT Top 10-2017 A7-Cross-Site Scripting (XSS)