Home/ Questions/Q 8162005
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-06T18:37:02+00:00

xml.append(<alertDesc>); xml.append(desc); xml.append(</alertDesc>); response.getWriter().write(xml.toString()); response.setContentType(text/xml); response.setHeader(Cache-Control, no-cache); xml is a StringBuffer object. I have

  • 0
xml.append("<alertDesc>");
xml.append(desc);
xml.append("</alertDesc>");

response.getWriter().write(xml.toString());  
response.setContentType("text/xml");
response.setHeader("Cache-Control", "no-cache");

xml is a StringBuffer object.

I have this piece of code and there is some leakage of sensitive data from the syntax response.getWriter().write(xml.toString());. I don’t have any idea of this thing.

Can any one tell me something about this? This issue is been reported by a code audit tool.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    use validator and escaping techniches from ESAPI to wrap the desc field It will help!!!!!

    • 0