...
Compliant Solution
This compliant solution sanitizes just validates the username input before logging it, preventing injection attacks. Refer to rule IDS00-J. Sanitize untrusted data passed across a trust boundary for more details on input sanitization.
...
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="7fa3529c3676e363-aa466336-4086431a-b76abdc5-7d089e92fbbced84b9a6cd5d"><ac:plain-text-body><![CDATA[ | [ISO/IEC TR 24772:2010 | http://www.aitcnet.org/isai/] | Injection [RST] | ]]></ac:plain-text-body></ac:structured-macro> |
CWE-144. Improper neutralization of line delimiters | ||||
| CWE-150. Improper neutralization of escape, meta, or control sequences |
...
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="6e7f2e289abe690e-a151c2c7-4f804613-bbe4a739-fded74c9bd31fcd9adde5056"><ac:plain-text-body><![CDATA[ | [[API 2006 | AA. References#API 06]] | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a1019c1e144b2270-106e472d-455a4ad5-b917a381-1831e4812412800da8d28586"><ac:plain-text-body><![CDATA[ | [[OWASP 2008 | AA. References#OWASP 08]] | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="fb84c75d3f8d4a2e-4aa68420-4deb4fa6-8101a719-3c614c7e7f4a54f9eb471dec"><ac:plain-text-body><![CDATA[ | [[PCI DSS Standard | https://www.pcisecuritystandards.org/security_standards/pci_dss.shtml]] | ]]></ac:plain-text-body></ac:structured-macro> |
...