Reflective cross-site scripting attack

[QiAnXinCodeSafe]

Hi！
I am a staff member of QiAnXin Code Guard. In our open source code detection project, I found two reflective xss vulnerabilities in mTracker. The details are as follows:

The errorErrorDescription method receives the errorcode parameter in the uri, and returns directly without checking. If the returned information is on the page, it will lead to cross-site scripting attack.

The same problem still exists in QueueService.java