Update ruby/ql/src/experimental/cwe-176/examples/unicode_normalization.rb

Sim4n6 · aibaars · web-flow · commit e345d7dca488 · 2023-05-20T12:54:03.000+01:00
Co-authored-by: Arthur Baars &lt;aibaars@github.com&gt;
diff --git a/ruby/ql/src/experimental/cwe-176/examples/unicode_normalization.rb b/ruby/ql/src/experimental/cwe-176/examples/unicode_normalization.rb
@@ -1,7 +1,7 @@
 class UnicodeNormalizationHtMLSafeController < ActionController::Base
   def unicodeNormalize
     unicode_input = params[:unicode_input]
-    unicode_html_safe = unicode_input.html_safe
+    unicode_html_safe = CGI.escapeHTML(unicode_input).html_safe
     normalized_nfkc = unicode_html_safe.unicode_normalize(:nfkc) # $result=BAD
     normalized_nfc = unicode_html_safe.unicode_normalize(:nfc) # $result=BAD
   end
