mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-09 19:45:13 +02:00
new capacity bits (#67)
This commit is contained in:
parent
afaffc0df6
commit
7d0e7320e2
261 changed files with 10591 additions and 231 deletions
11
tests/fixtures/header_injection/java/UnsafeSetHeader.java
vendored
Normal file
11
tests/fixtures/header_injection/java/UnsafeSetHeader.java
vendored
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
// Unsafe: HttpServletResponse.setHeader receives a value built from a
|
||||
// request parameter. HEADER_INJECTION fires on the value argument.
|
||||
import javax.servlet.http.HttpServletRequest;
|
||||
import javax.servlet.http.HttpServletResponse;
|
||||
|
||||
public class UnsafeSetHeader {
|
||||
public void handle(HttpServletRequest req, HttpServletResponse res) {
|
||||
String lang = req.getParameter("lang");
|
||||
res.setHeader("X-Lang", lang);
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue