We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
When we assign a position of a tainted array to an object "a", should mark "a" as tainted. Consider the following example:
protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException { String[] names = req.getParameterValues(FIELD_NAME); Object o1, o2, o3, o4, o5, o6, o7, o8, o9, o10, o11, o12, o13, o14, o15, o16, o17, o18, o19, o20, o21, o22, o23, o24, o25, o26, o27, o28, o29, o30, o31, o32, o33, o34, o35, o36, o37, o38, o39, o40; o1 = o2 = o3 = o4 = o5 = o6 = o7 = o8 = o9 = o10 = o11 = o12 = o13 = o14 = o15 = o16 = o17 = o18 = o19 = o20 = o21 = o22 = o23 = o24 = o25 = o26 = o27 = o28 = o29 = o30 = o31 = o32 = o33 = o34 = o35 = o36 = o37 = o38 = o39 = o40 = names[0]; PrintWriter writer = resp.getWriter(); writer.println(o1); /* BAD */ writer.println(o2); /* BAD */ writer.println(o3); /* BAD */ writer.println(o4); /* BAD */ writer.println(o32); /* BAD */ writer.println(o37); /* BAD */ writer.println(o40); /* BAD */ }
All the o* objects should be marked as tainted.
o*
The text was updated successfully, but these errors were encountered:
No branches or pull requests
When we assign a position of a tainted array to an object "a", should mark "a" as tainted. Consider the following example:
All the
o*
objects should be marked as tainted.The text was updated successfully, but these errors were encountered: