Preventing LDAP Injection in Java - Revision history

Imifos: Moved page into the right category. See Java space page for me details. Content has not been reviewed in this edit.

2017-11-10T21:48:52Z

Moved page into the right category. See Java space page for me details. Content has not been reviewed in this edit.

Jmanico at 16:29, 9 December 2016

2016-12-09T16:29:28Z

Jmanico at 16:29, 9 December 2016

2016-12-09T16:29:15Z

Jmanico at 21:14, 5 June 2014

2014-06-05T21:14:56Z

Jmanico at 21:14, 5 June 2014

2014-06-05T21:14:30Z

Jmanico at 21:14, 5 June 2014

2014-06-05T21:14:05Z

MediaWiki spam cleanup: Reverting to last version not containing links to s1.shard.jp

2009-06-03T12:50:34Z

Reverting to last version not containing links to s1.shard.jp

Deleted user at 02:14, 31 May 2009

2009-05-31T02:14:25Z

MediaWiki spam cleanup: Reverting to last version not containing links to s1.shard.jp

2009-05-29T18:01:06Z

Reverting to last version not containing links to s1.shard.jp

Deleted user at 16:31, 29 May 2009

2009-05-29T16:31:47Z

← Older revision		Revision as of 21:48, 10 November 2017
Line 93:		Line 93:
	assertEquals("LDAP Christams Tree", "Hi \\28This\\29 = is \\2a a \\5c test # ç à ô", SecTool.escapeLDAPSearchFilter("Hi (This) = is * a \\ test # ç à ô"));		assertEquals("LDAP Christams Tree", "Hi \\28This\\29 = is \\2a a \\5c test # ç à ô", SecTool.escapeLDAPSearchFilter("Hi (This) = is * a \\ test # ç à ô"));

−	[[Category:~~OWASP~~ Java ~~Project~~]]	+	[[Category:Java]]

@@ Line 2: / Line 2: @@
 | type=old
 | lastRevision=2008-03-01
-| comment=Please visit https://www.owasp.org/index.php/LDAP_Injection_Prevention_Cheat_Sheet#Primary_Defenses
+| comment=Please visit https://www.owasp.org/index.php/LDAP_Injection_Prevention_Cheat_Sheet
 }}

@@ Line 2: / Line 2: @@
 | type=old
 | lastRevision=2008-03-01
-| comment=The page should be updated.
+| comment=Please visit https://www.owasp.org/index.php/LDAP_Injection_Prevention_Cheat_Sheet#Primary_Defenses
 }}

@@ Line 1: / Line 1: @@
 ==Approach==
 The best way to prevent LDAP injection is to use a positive validation scheme for ensuring that the data going into your queries doesn't contain any attacks. You can read more in [[:Category:OWASP Guide Project|the OWASP Development Guide]] about input validation.
@@ Line 88: / Line 94: @@
 [[Category:OWASP Java Project]]

← Older revision		Revision as of 21:14, 5 June 2014
Line 1:		Line 1:
−	~~==Status==~~
−	~~Needs to be reviewed~~
−
	==Approach==		==Approach==
	The best way to prevent LDAP injection is to use a positive validation scheme for ensuring that the data going into your queries doesn't contain any attacks. You can read more in [[:Category:OWASP Guide Project\|the OWASP Development Guide]] about input validation.		The best way to prevent LDAP injection is to use a positive validation scheme for ensuring that the data going into your queries doesn't contain any attacks. You can read more in [[:Category:OWASP Guide Project\|the OWASP Development Guide]] about input validation.

← Older revision		Revision as of 21:14, 5 June 2014
Line 91:		Line 91:

	[[Category:OWASP Java Project]]		[[Category:OWASP Java Project]]
		+
		+	{{taggedDocument
		+	\| type=old
		+	\| lastRevision=2008-03-01
		+	\| comment=The page should be updated.
		+	}}

@@ Line 1: / Line 1: @@
 ==Status==
 Needs to be reviewed
@@ Line 123: / Line 80: @@
          //escapeDN
-         assertEquals("No special characters to escape", "HelloÃ©", escapeDN("HelloÃ©"));
+         assertEquals("No special characters to escape", "Helloé", escapeDN("Helloé"));
-         assertEquals("leading #", "\\# HelloÃ©", escapeDN("# HelloÃ©"));
+         assertEquals("leading #", "\\# Helloé", escapeDN("# Helloé"));
-         assertEquals("leading space", "\\ HelloÃ©", escapeDN(" HelloÃ©"));
+         assertEquals("leading space", "\\ Helloé", escapeDN(" Helloé"));
-         assertEquals("trailing space", "HelloÃ©\\ ", escapeDN("HelloÃ© "));
+         assertEquals("trailing space", "Helloé\\ ", escapeDN("Helloé "));
          assertEquals("only 3 spaces", "\\  \\ ", escapeDN("   "));
          assertEquals("Christmas Tree DN", "\\ Hello\\\\ \\+ \\, \\\"World\\\" \\;\\ ", Test.escapeDN(" Hello\\ + , \"World\" ; "));
-         assertEquals("No special characters to escape", "Hi This is a test #Ã§Ã ", SecTool.escapeLDAPSearchFilter("Hi This is a test #Ã§Ã "));
+         assertEquals("No special characters to escape", "Hi This is a test #çà", SecTool.escapeLDAPSearchFilter("Hi This is a test #çà"));
-         assertEquals("LDAP Christams Tree", "Hi \\28This\\29 = is \\2a a \\5c test # Ã§ Ã  Ã´", SecTool.escapeLDAPSearchFilter("Hi (This) = is * a \\ test # Ã§ Ã  Ã´"));
+         assertEquals("LDAP Christams Tree", "Hi \\28This\\29 = is \\2a a \\5c test # ç à ô", SecTool.escapeLDAPSearchFilter("Hi (This) = is * a \\ test # ç à ô"));
 [[Category:OWASP Java Project]]