cwe-643-xpath-injection

Official

Prevent XPath Injection vulnerabilities.

AuthorDevelopersCoffee
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill addresses and remediates XPath Injection vulnerabilities in Java applications, ensuring that user input cannot manipulate XPath queries to access or modify unintended data.

Core Features & Use Cases

  • Vulnerability Remediation: Provides deterministic fixes for CWE-643.
  • Secure Coding Practices: Guides developers on using parameterized queries with XPath variables.
  • Use Case: When a SAST tool flags a potential XPath Injection vulnerability in a Java web application's user authentication module, this skill can be applied to automatically refactor the vulnerable code into a secure implementation.

Quick Start

Use the cwe-643-xpath-injection skill to remediate the XPath Injection vulnerability in the provided Java code snippet.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: cwe-643-xpath-injection
Download link: https://github.com/DevelopersCoffee/java-cwe-security-skills/archive/main.zip#cwe-643-xpath-injection

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.