CWE-84—Improper Neutralization of Encoded URI Schemes in a Web Page

名称

Improper Neutralization of Encoded URI Schemes in a Web Page

描述

The web application improperly neutralizes user-controlled input for executable script disguised with URI encodings.

常见后果

范围：

Integrity

影响：

Unexpected State

相关 CWE

• CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')High