JZiegler742613 (Community Member) asked a question.
CWE: 117 Veracode.Attributes.CRLFCleanserAttribute is not working?
Scan Engine 20200218164746 is not picking up .Net [Veracode.Attributes.CRLFCleanserAttribute]? Is there anything else I can do?
[CRLFCleanserAttribute(UserComment = Comment)]
public static string FormateString(string message)
{
return System.Net.WebUtility.HtmlEncode(message);
}
.png){kind=logo}
Custom Cleansers require their ennoblement with your organization by your security team. They are not enable by default due to the possibility of misuse. Please see the content in the help center located here regarding is use: https://help.veracode.com/reader/DGHxSJy3Gn3gtuSIN2jkRQ/xrEjru~XmUHpO6~0FSae2Q
Additionally, The source code snippet is not an appropriate solution's for this weakness type. HTMLEncode does not resolve this issue regarding carriage return and line feed. Please schedule a consultation call so we can properly assist you in how to solve this weakness type.