如何修复 Java Web 应用程序中的 Trust Boundary Violation 漏洞 [英] How to fix Trust Boundary Violation flaw in Java Web application

问题描述

我收到来自 Veracode 的信任边界违规.我的代码是

I am receiving a Trust Boundary Violation from Veracode. My code is

userName= req.getParameter(Constant.USERNAME);
session.setAttribute(Constant.USERNAME, userName); //At this line i am getting Trust Boundry Violation flaw.

如何验证 userName 以避免违反信任边界缺陷?

How can I validate userName to avoid a trust boundary violation flaw?

推荐答案

根据您的用户名遵循的规则，只需使用正则表达式来验证 userName:

Simply use a regular expression to validate the userName according to the rules your usernames follow:

if(userName.matches("[0-9a-zA-Z_]+")
     session.setAttribute(Constant.USERNAME, userName);

这篇关于如何修复 Java Web 应用程序中的 Trust Boundary Violation 漏洞的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！