mirror of
https://github.com/github/codeql.git
synced 2026-07-14 07:48:16 +02:00
17 lines
703 B
Java
17 lines
703 B
Java
import com.unboundid.ldap.sdk.LDAPConnection;
|
|
import com.unboundid.ldap.sdk.DN;
|
|
import com.unboundid.ldap.sdk.RDN;
|
|
import com.unboundid.ldap.sdk.Filter;
|
|
|
|
public void ldapQueryGood(HttpServletRequest request, LDAPConnection c) {
|
|
String organizationName = request.getParameter("organization_name");
|
|
String username = request.getParameter("username");
|
|
|
|
// GOOD: Organization name is encoded before being used in DN
|
|
DN safeDn = new DN(new RDN("OU", "People"), new RDN("O", organizationName));
|
|
|
|
// GOOD: User input is encoded before being used in search filter
|
|
Filter safeFilter = Filter.createEqualityFilter("username", username);
|
|
|
|
c.search(safeDn.toString(), SearchScope.ONE, safeFilter);
|
|
} |