how to protect wso2 api manager login page from XSS attack?

Solution 1:

The process is documented in the official WSO2 API Manager documentation. You can check it here