Hima – WindowsTechs.com

Benefit of Parameter Map size validation in web application controller

Posted on August 29, 2018 by Hima

I have a web application (Spring MVC) and have input data validation for every parameter in the controller. What is NOT present is checking for accepted Parameter Map Size. i.e When the controller expected 10 parameters and the request has… Continue reading Benefit of Parameter Map size validation in web application controller→

False positive SQL Injection by ZAP with adding new parameter query

Posted on August 17, 2018 by Hima

I have a spring MVC web application and am running ZAP Active scan on it.

I noticed that ZAP will modify URL , and add additional parameter named query and value query+AND+1%3D1+–+ to test SQL Injection. And in my case, it raise HIGH ME… Continue reading False positive SQL Injection by ZAP with adding new parameter query→