HTB CWEE

HTB Certified Web Exploitation Expert (CWEE)

Source Code ReviewEnglish
Exam overview

Practice session

During source code review of a Java Spring application, you find: String query = "SELECT * FROM users WHERE username = '" + username + "'"; This is vulnerable to SQLi. Which mitigation BEST resolves this without changing application behavior?

Loading your practice session…