mirror of
https://github.com/github/codeql.git
synced 2026-04-30 19:26:02 +02:00
Update javascript/ql/src/experimental/Security/CWE-090/LdapInjection.qhelp
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
committed by
GitHub
parent
bfae0ef5d5
commit
116e7d006d
@@ -33,7 +33,7 @@ This ensures the meaning of the query cannot be changed by a malicious user.</p>
|
||||
|
||||
<sample src="examples/example_good1.js" />
|
||||
|
||||
<p>The third example the <code>username</code> is passed to an <code>OrFilter</code> filter before it is included in the search filters.
|
||||
<p>In the fourth example the <code>username</code> is passed to an <code>OrFilter</code> filter before it is included in the search filters.
|
||||
This ensures the meaning of the query cannot be changed by a malicious user.</p>
|
||||
|
||||
<sample src="examples/example_good2.js" />
|
||||
|
||||
Reference in New Issue
Block a user