sander/notes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update sectraining.md

Browse source
This commit is contained in:
Sander Hautvast 2024-02-05 10:31:04 +01:00 • committed by GitHub
parent eb9d88de37
commit 5c9876ad8a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
sectraining.md
View file

@ -20,7 +20,7 @@ JavaScript frameworks (e.g., Angular, React) or server-side templating systems (
#### Java #### Java
|type| java | |context|vulnerable code | java |
|---|---|---| |---|---|---|
|HTML Body |<div>USER-CONTROLLED-DATA</div> | `Encode.forHtml` | |HTML Body |<div>USER-CONTROLLED-DATA</div> | `Encode.forHtml` |
|HTML Attribute| <input type="text" value="USER-CONTROLLED-DATA"> |`Encode.forHtmlAttribute`| |HTML Attribute| <input type="text" value="USER-CONTROLLED-DATA"> |`Encode.forHtmlAttribute`|