search

JoyChou93 / java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security
2.42k stars 645 forks source link

Java 1.7/1.8 no CRLF vulns (test in Java 1.7/1.8) #35

Closed HYWZ36 closed 3 years ago

HYWZ36 commented 3 years ago

Yes, I apply it in Java 11, and it still can not work. Can you help me?

Java 1.7/1.8 no CRLF vulns (test in Java 1.7/1.8)

Originally posted by @JoyChou93 in https://github.com/JoyChou93/java-sec-code/issues/34#issuecomment-817122824

JoyChou93 commented 3 years ago

Therefore, there should be no CRLF vulnerabilities in Java. Generally, CRLF exists in NGINX and PHP.