mirror of
https://github.com/github/codeql.git
synced 2025-12-21 19:26:31 +01:00
Update java/ql/src/Security/CWE/CWE-079/XSS.java
This commit is contained in:
@@ -3,7 +3,7 @@ public class XSS extends HttpServlet {
|
||||
throws ServletException, IOException {
|
||||
// BAD: a request parameter is written directly to the Servlet response stream
|
||||
response.getWriter().print(
|
||||
"The page \"" + request.getParameter("page") + "\" was not found."); // $xss
|
||||
"The page \"" + request.getParameter("page") + "\" was not found.");
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user