hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 16:25:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix typo in NettyRequestSplitting.java

Browse Source
This commit is contained in:
Jonathan Leitschuh
2024-02-14 14:03:33 -05:00
committed by GitHub
parent f5d9fe6b08
commit 50056d603e
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/src/Security/CWE/CWE-113/NettyRequestSplitting.java
View File

@@ -1,11 +1,11 @@
public class NettyRequestSplitting {
// BAD: Disables the internal response splitting verification
// BAD: Disables the internal request splitting verification
private final DefaultHttpHeaders badHeaders = new DefaultHttpHeaders(false);
// GOOD: Verifies headers passed don't contain CRLF characters
private final DefaultHttpHeaders goodHeaders = new DefaultHttpHeaders();
// BAD: Disables the internal response splitting verification
// BAD: Disables the internal request splitting verification
private final DefaultHttpRequest badRequest = new DefaultHttpRequest(httpVersion, method, uri, false);
// GOOD: Verifies headers passed don't contain CRLF characters