Hi @kpatel521313 (Community Member)​ ,

Improper Neutralization of CRLF is reported when application does not properly sanitize CRLF sequences from inputs.

You may use the PHP string replace str_replace() to replace the CRLF characters or a regular expression to validate all instances of CRLF sequences with preg_replace().

CRLF Sequences:

\n

\r

%0A

%0D

Please note: once the fix is applied the scanner would still report this flaw as the scanner doesn't know the text that will be replaced with; is a valid one for your application. Hence you may mitigate these flaws on the Veracode platform.

You can find steps on how to mitigate flaws here - https://help.veracode.com/reader/DGHxSJy3Gn3gtuSIN2jkRQ/~p4MSKOS8F8X8h0KwFTKoQ