Skip to content

Commit

Permalink
Fix OTHER XML tag
Browse files Browse the repository at this point in the history
  • Loading branch information
smowton committed Dec 9, 2021
1 parent 9f69c75 commit 75f3ebf
Showing 1 changed file with 1 addition and 1 deletion.
Expand Up @@ -7,7 +7,7 @@
If the syntax <code>${param}</code> is used in those statements, and <code>param</code> is a parameter of the annotated method, attackers can exploit this to tamper with the SQL statements or execute arbitrary SQL commands.</p>
</overview>

<<recommendation>
<recommendation>
<p>
When writing MyBatis mapping statements, use the syntax <code>#{xxx}</code> whenever possible. If the syntax <code>${xxx}</code> must be used, any parameters included in it should be sanitized to prevent SQL injection attacks.
</p>
Expand Down

0 comments on commit 75f3ebf

Please sign in to comment.