Description
CWE: 113 HTTP Response Splitting
BadSource: PropertiesFile Read data from a .properties file (in property named data)
GoodSource: A hardcoded string
Sinks: addHeaderServlet
GoodSink: URLEncode input
BadSink : querystring to addHeader()
Flow Variant: 45 Data flow: data passed as a private class member variable from one function to another in the same class
Flaws
Test Suites
Documentation
Trace
Files
xxxxxxxxxx1 Have any comments on this test case? Please, send us an email.