HTB CWEE
HTB Certified Web Exploitation Expert (CWEE)
Source Code ReviewEnglish
Exam overviewPractice session
During source code review of a Java Spring application, you find: String query = "SELECT * FROM users WHERE username = '" + username + "'"; This is vulnerable to SQLi. Which mitigation BEST resolves this without changing application behavior?
Loading your practice session…