Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: the code is just validating the username. the text is modified to be in line with the code

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="58d5187c6b211bde-e18d886c-47874708-85f39d96-d06c990b2c45a284a3d87a57"><ac:plain-text-body><![CDATA[

[ISO/IEC TR 24772:2010

http://www.aitcnet.org/isai/]

Injection [RST]

]]></ac:plain-text-body></ac:structured-macro>

MITRE CWE

CWE-144. Improper neutralization of line delimiters

 

CWE-150. Improper neutralization of escape, meta, or control sequences

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="6bb6636f40225cb4-238f7194-46b84c6b-a46c8695-0bb071935533cca9c00a692c"><ac:plain-text-body><![CDATA[

[[API 2006

AA. References#API 06]]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="fe7d84fba72703ec-4aee90ff-47a64276-86d8ab62-1c949e1d5e4f1c4e5c71af97"><ac:plain-text-body><![CDATA[

[[OWASP 2008

AA. References#OWASP 08]]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="3ec13ea42a31b21a-535b5502-4da74818-898fbd18-1905a02dd83680d5ddafcded"><ac:plain-text-body><![CDATA[

[[PCI DSS Standard

https://www.pcisecuritystandards.org/security_standards/pci_dss.shtml]]

]]></ac:plain-text-body></ac:structured-macro>

...

IDS02-J. Canonicalize path names before validating them            IDS04-J. Limit the size of files passed to read from ZipInputStream