EPMOSDU-1401-sast fix
Description
Checkmarx complains that untrusted data is embedded into the output without proper sanitization or encoding,
enabling an attacker to inject malicious code into the generated web-page.
Original message from Checkmarx:
What is the current behavior?
No sanitization is provided for untrusted data.
What is the new behavior?
Sanitization is provided for untrusted data.
Does this introduce a breaking change?
No
Edited by Vladimir Korolevskii (EPAM)
Merge request reports
Activity
assigned to @Vladimir_Korolevskii
added Vulnerability Management label
changed milestone to %M26 - Release 1.0.0 (Venus - Phase 1)
mentioned in commit 3fad3971
- Resolved by Derek Hudson
- Resolved by Derek Hudson
Please register or sign in to reply