Portability_Flaw_Locale_Dependent_Comparison issue exists @ src/main/java/org/joychou/security/SecurityUtil.java in branch master

The application handles input strings in a locale-unspecific manner. In particular, src\main\java\org\joychou\security\SecurityUtil.java's checkURLbyEndsWith calls toLowerCase at line 23 to manipulate the string. The resulting string is compared with endsWith by checkURLbyEndsWith, at src\main\java\org\joychou\security\SecurityUtil.java:23.

Severity: Low

CWE:474

Vulnerability details and guidance

Internal Guidance

Checkmarx

Lines: 34

Code (Line #34):

            String host = uri.getHost().toLowerCase();