mirror of
https://github.com/github/codeql.git
synced 2026-06-13 08:51:20 +02:00
15 lines
635 B
Java
15 lines
635 B
Java
import javax.servlet.http.HttpServlet;
|
|
import javax.servlet.http.HttpServletRequest;
|
|
import javax.servlet.http.HttpServletResponse;
|
|
import javax.servlet.ServletException;
|
|
import java.io.IOException;
|
|
|
|
public class ExternalAPISinkExample extends HttpServlet {
|
|
protected void doGet(HttpServletRequest request, HttpServletResponse response)
|
|
throws ServletException, IOException {
|
|
// BAD: a request parameter is written directly to an error response page
|
|
response.sendError(HttpServletResponse.SC_NOT_FOUND,
|
|
"The page \"" + request.getParameter("page") + "\" was not found."); // $ Alert[java/untrusted-data-to-external-api]
|
|
}
|
|
}
|