VBonde168871 (Community Member) asked a question.
veracode point to flaw below line while I am going to show msaage on jsp <td colspan="5" align="center"><span class="suceessMsgText"><=strMessage%></span></td> This message contain only success text
Hello,
In general when reviewing flaws of this category we recommend reviewing the 'Data Path' (in the IDE plugin it is called "Call stack") as it should show the path that our analysis has found where error message contents are added to the variable.
If you continue to have questions after reviewing this I would recommend either creating a new support issue (you can find this isn the menu in the top right next to your username) or scheduling a consultation with a Veracode Application Security Consultant (you can find more information on this here: https://help.veracode.com/reader/DGHxSJy3Gn3gtuSIN2jkRQ/bLo7cMy~2mOWtJ~kbrVzDg ).
Thank you,
Boy Baukema, Application Security Consultant @ CA Veracode
.png){kind=logo}
Hello,
In general when reviewing flaws of this category we recommend reviewing the 'Data Path' (in the IDE plugin it is called "Call stack") as it should show the path that our analysis has found where error message contents are added to the variable.
If you continue to have questions after reviewing this I would recommend either creating a new support issue (you can find this isn the menu in the top right next to your username) or scheduling a consultation with a Veracode Application Security Consultant (you can find more information on this here: https://help.veracode.com/reader/DGHxSJy3Gn3gtuSIN2jkRQ/bLo7cMy~2mOWtJ~kbrVzDg ).
Thank you,
Boy Baukema, Application Security Consultant @ CA Veracode