How does encoding and escaping prevent LDAP injection attacks?

I couldn’t find any helpful YouTube videos on this topic and many articles don’t explain it so I’m hoping someone here might help me understand.

Could someone dumb it down for me?

I was tasked to fix a couple LDAP injection security risks and I’m reading articles about how to secure this risk.

Articles say to use a library that encodes ldap queries, but I’m not understanding how that helps. I need to understand how that works because I might have to do it myself if project manager doesn’t allow more libraries.

Same issue with escaping— DN escaping and Search Filter Escaping

submitted by /u/GuerroCanelo
[link] [comments]

from hacking: security in practice https://ift.tt/GmTS9lQ

Comments