mirror of
https://github.com/github/codeql.git
synced 2026-04-25 08:45:14 +02:00
Update rust/ql/src/queries/security/CWE-117/LogInjection.qhelp
Co-authored-by: Sophie <29382425+sophietheking@users.noreply.github.com>
This commit is contained in:
@@ -18,7 +18,7 @@ arbitrary HTML may be included to spoof log entries.</p>
|
||||
User input should be suitably sanitized before it is logged.
|
||||
</p>
|
||||
<p>
|
||||
If the log entries are in plain text then line breaks should be removed from user input, using
|
||||
If the log entries are in plain text, then line breaks should be removed from user input using
|
||||
<code>String::replace</code> or similar. Care should also be taken that user input is clearly marked
|
||||
in log entries.
|
||||
</p>
|
||||
|
||||
Reference in New Issue
Block a user