Security.

ibiscum · May 3, 2024 · 3dadd15 · 3dadd15
1 parent 5211a5b
commit 3dadd15
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/Chapter15/Exercise15.03/main.go b/Chapter15/Exercise15.03/main.go
@@ -2,6 +2,7 @@ package main
 
 import (
 	"fmt"
+	"html"
 	"log"
 	"net/http"
 	"strings"
@@ -18,7 +19,7 @@ func Hello(w http.ResponseWriter, r *http.Request) {
 		}
 		return
 	}
-	_, err := w.Write([]byte(fmt.Sprintf("Hello %s", strings.Join(name, ","))))
+	_, err := w.Write([]byte(fmt.Sprintf("Hello %s", html.EscapeString(strings.Join(name, ",")))))
 	if err != nil {
 		log.Fatal(err)
 	}