Skip to content

Commit

Permalink
fix 'Bypass Security Checks'
Browse files Browse the repository at this point in the history
VEO-XXX

Fix code vulnerability reported by 'sim4n6'.
(https://sim4n6.beehiiv.com/p/unicode-characters-bypass-security-checks)
TT#2553613 Late-Unicode Normalization in SerNet/verinice codebase
  • Loading branch information
UrsZeidler committed Jul 24, 2023
1 parent 9c0b45b commit c864de8
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -88,7 +88,7 @@ public String getQuery() {
}

private static String sanitizeQuery(String query) {
return Normalizer.normalize(query.replace("/", ""), Form.NFC);
return Normalizer.normalize(query, Form.NFC).replace("/", "");
}

/**
Expand Down

0 comments on commit c864de8

Please sign in to comment.