Esempio n. 1
0
        public override void Bad(HttpRequest req, HttpResponse resp)
        {
            string data = CWE113_HTTP_Response_Splitting__Web_Get_Cookies_Web_setHeader_61b.BadSource(req, resp);

            if (data != null)
            {
                /* POTENTIAL FLAW: Input not verified before inclusion in header */
                resp.AddHeader("Location", "/author.jsp?lang=" + data);
            }
        }