search

satyamchaurasiapersistent / JavaVulnerableLab

lab
0 stars 0 forks source link

CX Missing_HSTS_Header @ src/AddPage.java [master] #152

Closed satyamchaurasiapersistent closed 1 year ago

satyamchaurasiapersistent commented 1 year ago

Missing_HSTS_Header issue exists @ src/AddPage.java in branch master

The web-application does not define an HSTS header, leaving it vulnerable to attack. Similarity ID: 2126301207

Severity: Medium

CWE:346

Checkmarx

Training Recommended Fix

Lines: 55

Code (Line #55):

out.print("Successfully created the file: <a href='../pages/"+fileName+"'>"+fileName+"</a>");