RShetty834116 (Community Member) asked a question.
What type of fixes I have to apply for crlf injection in c# ?
_logger.DebugFormat("Completed Blocklist check for CDDId{0} for Producer Reference {1}, SchemeCode {2}",cddCheckDetailsDTO.CDDId, cddCheckDetailsDTO, cddCheckDetailsDTO.LegacySchemeCode)
For this code I have to apply fixes to avoid crlf injection vulnerability
.png){kind=logo}
Hi @RShetty834116 (Community Member) ,
We typically recommend use of a Supported Cleansing Function, listed at: https://docs.veracode.com/r/Supported_NET_Cleansing_Functions .
I would also recommend reading this article which has more details on how to remediate flaws of this type: https://community.veracode.com/s/article/How-to-Fix-CWE-117-Improper-Output-Neutralization-for-Logs .
Thank you,
Boy Baukema