Exemplos de testcases.CWE113_HTTP_Response_Splitting CWE113_HTTP_Response_Splitting__Web_Listen_tcp_setHeader_67a.Container em C# (CSharp)

Exemplo n.º 1

Arquivo: CWE113_HTTP_Response_Splitting__Web_Listen_tcp_setHeader_67b.cs Projeto: imranyafai/juliet-test-suite-C-

        /* goodG2B() - use goodsource and badsink */
        public static void GoodG2BSink(CWE113_HTTP_Response_Splitting__Web_Listen_tcp_setHeader_67a.Container dataContainer, HttpRequest req, HttpResponse resp)
        {
            string data = dataContainer.containerOne;

            if (data != null)
            {
                /* POTENTIAL FLAW: Input not verified before inclusion in header */
                resp.AddHeader("Location", "/author.jsp?lang=" + data);
            }
        }

Exemplo n.º 2

Arquivo: CWE113_HTTP_Response_Splitting__Web_Listen_tcp_setHeader_67b.cs Projeto: imranyafai/juliet-test-suite-C-

        /* goodB2G() - use badsource and goodsink */
        public static void GoodB2GSink(CWE113_HTTP_Response_Splitting__Web_Listen_tcp_setHeader_67a.Container dataContainer, HttpRequest req, HttpResponse resp)
        {
            string data = dataContainer.containerOne;

            if (data != null)
            {
                /* FIX: use URLEncoder.encode to hex-encode non-alphanumerics */
                data = HttpUtility.UrlEncode(data, Encoding.UTF8);
                resp.AddHeader("Location", "/author.jsp?lang=" + data);
            }
        }