CX Portability_Flaw_Locale_Dependent_Comparison @ root/register.jsp [master]

[CxYair]

Portability_Flaw_Locale_Dependent_Comparison issue exists @ root/register.jsp in branch master

The application handles input strings in a locale-unspecific manner. In particular, root\register.jsp's if calls toLowerCase at line 39 to manipulate the string. The resulting string is compared with indexOf by if, at root\register.jsp:39.

Severity: Low

CWE:474

Checkmarx

Training
Recommended Fix

Lines: 39

---

Code (Line #39):

			if (username.replaceAll("\\s", "").toLowerCase().indexOf("<script>alert(\"xss\")</script>") >= 0) {

---