C# (CSharp) testcases.CWE113_HTTP_Response_Splitting CWE113_HTTP_Response_Splitting__Web_Params_Get_Web_addHeader_61b Examples

Example #1

File: CWE113_HTTP_Response_Splitting__Web_Params_Get_Web_addHeader_61a.cs Project: Anzsley/Juliet_Test_Suite_v1.3_for_C_Sharp

        /* goodG2B() - use goodsource and badsink */
        private static void GoodG2B(HttpRequest req, HttpResponse resp)
        {
            string data = CWE113_HTTP_Response_Splitting__Web_Params_Get_Web_addHeader_61b.GoodG2BSource(req, resp);

            /* POTENTIAL FLAW: Input from file not verified */
            if (data != null)
            {
                resp.AddHeader("Location", "/author.jsp?lang=" + data);
            }
        }

Example #2

File: CWE113_HTTP_Response_Splitting__Web_Params_Get_Web_addHeader_61a.cs Project: Anzsley/Juliet_Test_Suite_v1.3_for_C_Sharp

        /* goodB2G() - use badsource and goodsink */
        private static void GoodB2G(HttpRequest req, HttpResponse resp)
        {
            string data = CWE113_HTTP_Response_Splitting__Web_Params_Get_Web_addHeader_61b.GoodB2GSource(req, resp);

            /* FIX: use URLEncoder.encode to hex-encode non-alphanumerics */
            if (data != null)
            {
                data = HttpUtility.UrlEncode("", Encoding.UTF8);
                resp.AddHeader("Location", "/author.jsp?lang=" + data);
            }
        }