From bd9100eb4e46355a9734491d68dbc2258945e5ec Mon Sep 17 00:00:00 2001 From: Simon Taranto Date: Mon, 24 Aug 2020 09:00:26 -0600 Subject: [PATCH] Update other file too --- ql/src/Security/CWE-079/ReflectedXssGood.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ql/src/Security/CWE-079/ReflectedXssGood.go b/ql/src/Security/CWE-079/ReflectedXssGood.go index a16c6538e34..6f76ac4a434 100644 --- a/ql/src/Security/CWE-079/ReflectedXssGood.go +++ b/ql/src/Security/CWE-079/ReflectedXssGood.go @@ -11,7 +11,7 @@ func serve1() { r.ParseForm() username := r.Form.Get("username") if !isValidUsername(username) { - // BAD: a request parameter is incorporated without validation into the response + // GOOD: a request parameter is escaped before being put into the response fmt.Fprintf(w, "%q is an unknown user", html.EscapeString(username)) } else { // TODO: do something exciting