File tree Expand file tree Collapse file tree
python/ql/src/experimental/Security/CWE-090 Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -27,14 +27,14 @@ in the search filter and DN for the LDAP query.
2727A malicious user could provide special characters to change the meaning of these
2828components, and search for a completely different set of values.</p >
2929
30- <sample src =" examples/example_bad1.js " />
31- <sample src =" examples/example_bad2.js " />
30+ <sample src =" examples/example_bad1.py " />
31+ <sample src =" examples/example_bad2.py " />
3232
3333<p >In the third and four example, the input provided by the user is sanitized before it is included in the search filter or DN.
3434This ensures the meaning of the query cannot be changed by a malicious user.</p >
3535
36- <sample src =" examples/example_good1.js " />
37- <sample src =" examples/example_good2.js " />
36+ <sample src =" examples/example_good1.py " />
37+ <sample src =" examples/example_good2.py " />
3838</example >
3939
4040<references >
You can’t perform that action at this time.
0 commit comments