Question

Possible Duplicate:
Presvent exposure of sensitive data against PCI standards – response.getWriter().write(xml.toString())

I am getting the message “Leakage of toString() result” in the following Java code:

PrintWriter out = response.getWriter();
out.println("<a href=\""
            + XYZAC
            + "?"
            + fieldArray.get(i)
            + "="
            + content[j].split("=")[0]
            + "&sessionId="
            + request.getAttribute("sessionId").toString()
            + "&mSA=" + pHNO
            + "\"" + ">"
            + content[j].split("=")[1]
            + "</a>");

Can any one tell me where the leakage is, and how to fix it? The message is from a code auditing tool.

Answer 1

The call to toString is redundant. Perhaps that is what it is complaining about.

I would remove it and try again.