CWE-795

The product receives data from an upstream component, but only accounts for special elements at a specified location, thereby missing remaining special elements that may exist before sending it to a downstream component.

{"xhtml:p":["A filter might only account for instances of special elements when they occur:","This may leave special elements in the data that did not match the filter position, but still may be dangerous."],"xhtml:ul":[{"xhtml:li":["relative to a marker (e.g. \"at the beginning/end of string; the second argument\"), or","at an absolute position (e.g. \"byte number 10\")."]}]}

Applicable Platforms