846d6c7568
* Add java to rule S5496 * Add S5496 for Java * Adjustments based on review * Fix to make asciidoc tests pass --------- Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com> Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com> Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
9 lines
437 B
Plaintext
9 lines
437 B
Plaintext
Server-side template injections occur when an application
|
|
retrieves data from a user or a third-party service and inserts it into a
|
|
template, without sanitizing it first.
|
|
|
|
If an application contains a template that is vulnerable to injections,
|
|
it is exposed to attacks that target the underlying rendering server.
|
|
|
|
A user with malicious intent can create requests that will cause
|
|
the template to change its logic into unwanted behavior. |