Skip to content

Commit ebd2b93

Browse files
Update java/ql/src/Security/CWE/CWE-90/LdapInjection.qhelp
Co-Authored-By: Felicity Chapman <felicitymay@github.com>
1 parent bbcfbd7 commit ebd2b93

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

java/ql/src/Security/CWE/CWE-90/LdapInjection.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ avoid a malicious user providing special characters that change the meaning
1414
of the query. If possible build the LDAP query using framework helper methods, for example
1515
from Spring's <code>LdapQueryBuilder</code> and <code>LdapNameBuilder</code>,
1616
instead of string concatenation. Alternatively, escape user input using an appropriate
17-
LDAP encoding method, for example: <code>encodeForLDAP</code> or </code>encodeForDN</code>
17+
LDAP encoding method, for example: <code>encodeForLDAP</code> or <code>encodeForDN</code>
1818
from OWASP ESAPI, <code>LdapEncoder.filterEncode</code> or <code>LdapEncoder.nameEncode</code>
1919
from Spring LDAP, or <code>Filter.encodeValue</code> from UnboundID library.</p>
2020
</recommendation>

0 commit comments

Comments
 (0)