File tree Expand file tree Collapse file tree 1 file changed +1
-1
lines changed
java/ql/src/Security/CWE/CWE-90 Expand file tree Collapse file tree 1 file changed +1
-1
lines changed Original file line number Diff line number Diff line change @@ -14,7 +14,7 @@ avoid a malicious user providing special characters that change the meaning
1414of the query. If possible build the LDAP query using framework helper methods, for example
1515from Spring's <code >LdapQueryBuilder</code > and <code >LdapNameBuilder</code >,
1616instead of string concatenation. Alternatively, escape user input using an appropriate
17- LDAP encoding method, for example: <code >encodeForLDAP</code > or </ code >encodeForDN</code >
17+ LDAP encoding method, for example: <code >encodeForLDAP</code > or <code >encodeForDN</code >
1818from OWASP ESAPI, <code >LdapEncoder.filterEncode</code > or <code >LdapEncoder.nameEncode</code >
1919from Spring LDAP, or <code >Filter.encodeValue</code > from UnboundID library.</p >
2020</recommendation >
You can’t perform that action at this time.
0 commit comments