ishangsf/rspec
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
rspec/rules/S5496/message.adoc

1 line
86 B
Plaintext
Raw Permalink Normal View History

Create rule S5496: Server-side templates should not be vulnerable to injection attacks (#3861) * Add java to rule S5496 * Add S5496 for Java * Adjustments based on review * Fix to make asciidoc tests pass --------- Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com> Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com> Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2024-04-18 15:26:08 +02:00
Change this code to not construct template content directly from user-controlled data.
Reference in New Issue Copy Permalink