/* goodG2B() - use goodsource and badsink */
private static void GoodG2B(HttpRequest req, HttpResponse resp)
{
string data = CWE113_HTTP_Response_Splitting__Web_QueryString_Web_setHeader_61b.GoodG2BSource(req, resp);
if (data != null)
{
/* POTENTIAL FLAW: Input not verified before inclusion in header */
resp.AddHeader("Location", "/author.jsp?lang=" + data);
}
}
/* goodB2G() - use badsource and goodsink */
private static void GoodB2G(HttpRequest req, HttpResponse resp)
{
string data = CWE113_HTTP_Response_Splitting__Web_QueryString_Web_setHeader_61b.GoodB2GSource(req, resp);
if (data != null)
{
/* FIX: use URLEncoder.encode to hex-encode non-alphanumerics */
data = HttpUtility.UrlEncode(data, Encoding.UTF8);
resp.AddHeader("Location", "/author.jsp?lang=" + data);
}
}
