Blind sql injection secure implementations

SasanLabs / VulnerableApp

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

https://sasanlabs.github.io/VulnerableApp/

Apache License 2.0

299 stars 400 forks source link

Closed imertetsu closed 3 weeks ago

imertetsu commented 3 weeks ago

This PR adds Blind SQL injection secure implementations for levels 4 and 5 in the BlindSQLInjectionVulnerability class.

Level 4: Implementation of getCarInformationLevel4 method using parameterized queries with JdbcTemplate.
Level 5: Implementation of the getCarInformationLevel5 method using EntityManager to safely perform queries using Hibernate, avoiding SQL injection.

Resolves: #405