Пример #1
0
        /* goodG2B() - use goodsource and badsink */
        private static void GoodG2B()
        {
            string data;

            /* FIX: Use a hardcoded string */
            data = "foo";
            Container dataContainer = new Container();

            dataContainer.containerOne = data;
            CWE90_LDAP_Injection__Environment_67b.GoodG2BSink(dataContainer);
        }
Пример #2
0
        public override void Bad()
        {
            string data;

            /* get environment variable ADD */
            /* POTENTIAL FLAW: Read data from an environment variable */
            data = Environment.GetEnvironmentVariable("ADD");
            Container dataContainer = new Container();

            dataContainer.containerOne = data;
            CWE90_LDAP_Injection__Environment_67b.BadSink(dataContainer);
        }