mirror of
https://github.com/github/codeql.git
synced 2026-04-29 10:45:15 +02:00
Update javascript/ql/src/experimental/Security/CWE-090/LdapInjection.qhelp
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
committed by
GitHub
parent
fb3148a7a8
commit
bfae0ef5d5
@@ -28,7 +28,7 @@ queries, and search for a completely different set of values.
|
||||
<sample src="examples/example_bad2.js" />
|
||||
|
||||
|
||||
<p>The second example the <code>username</code> is sanitized before it is included in the search filters.
|
||||
<p>In the third example the <code>username</code> is sanitized before it is included in the search filters.
|
||||
This ensures the meaning of the query cannot be changed by a malicious user.</p>
|
||||
|
||||
<sample src="examples/example_good1.js" />
|
||||
|
||||
Reference in New Issue
Block a user