Skip to content

Commit

Permalink
Update recommendation
Browse files Browse the repository at this point in the history
  • Loading branch information
ostorlab committed Jan 5, 2024
1 parent 5761fc3 commit 965b2fd
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions WEB_SERVICE/WEB/_CRITICAL/FILE_INCLUSION/recommendation.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,5 @@
To address File Inclusion vulnerabilities, consider the following recommendations:

- **Avoid Dynamic File Inclusion from user input:** unless necessary, avoid calling `include()`, `require()` or similar functions with user controlled input.
- **Input Whitelisting:** Use whitelists to allow only known and expected input values.
- **Input Validation and Sanitization:** Sanitize user input from special characters that may allow for path traversal like `../`
Expand Down

0 comments on commit 965b2fd

Please sign in to comment.