LDAP Injection (ARCH8107)
Key kotlin.security.ldap-injection · Severity error · Category security · CWE CWE-90
Flags LDAP search filters built with string templates from request data.
Incorrect
Section titled “Incorrect”ctx.search(base, "(uid=$user)", controls)Correct
Section titled “Correct”ctx.search(base, "(uid={0})", arrayOf(user), controls)Use filter arguments ({0}) or escape the value per RFC 4515.