Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com>
This commit is contained in:
Edward Minnix III 2023-08-07 00:37:13 -04:00 коммит произвёл Ed Minnix
Родитель 4eb1035dfe
Коммит 8d88af1af0
1 изменённых файлов: 3 добавлений и 3 удалений

Просмотреть файл

@ -22,18 +22,18 @@
<recommendation>
<p>
In order to maintain a trust boundary, data from less trusted sources should be validated before being used.
To maintain a trust boundary, validate data from less trusted sources before use.
</p>
</recommendation>
<example>
<p>
In the first (bad) example, the server accepts a parameter from the user and uses it to set the username without validation.
In the first (bad) example, the server accepts a parameter from the user, then uses it to set the username without validation.
</p>
<sample src="TrustBoundaryVulnerable.java" />
<p>
In the second (good) example, the server validates the parameter before using it to set the username.
In the second (good) example, the server validates the parameter from the user, then uses it to set the username.
</p>
<sample src="TrustBoundaryFixed.java" />