From 34da9087f54fd3f8143a8c8ba1388b955d3b8171 Mon Sep 17 00:00:00 2001 From: "David A. Wheeler" Date: Wed, 4 Sep 2024 11:49:28 -0400 Subject: [PATCH] input1: Clarify required range We mention the required range once, but that may not be obvious enough, so mention it twice. Signed-off-by: David A. Wheeler --- docs/labs/input1.html | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/labs/input1.html b/docs/labs/input1.html index ee3269d5..b8978368 100644 --- a/docs/labs/input1.html +++ b/docs/labs/input1.html @@ -144,7 +144,8 @@

Background

Unfortunately, this program doesn't do proper input validation. In this application -id is supposed to only be an integer within a restricted range. +id is supposed to only be an integer +between 1 and 9999 (including those numbers). As written below it fails to make that check. In fact, as written, this program has a vulnerability we haven't discussed yet called