PDA

View Full Version : Preventing LDAP Injection


wof
Nov 14th, 2006, 12:41 PM
Is there an easy way to escape strings used for Ldap operations here in Spring-LDAP?

ref: http://www.owasp.org/index.php/Preventing_LDAP_Injection_in_Java

rasky
Nov 17th, 2006, 06:20 AM
If you use the DistinguishedName and Filter classes, values will be properly encoded, which should prevent injection issues.