Fix encoding in example for CVE-2022-40151.

x-stream · Mar 23, 2024 · 2cf25e6 · 2cf25e6
1 parent 6328965
commit 2cf25e6
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/xstream-distribution/src/content/CVE-2022-40151.html b/xstream-distribution/src/content/CVE-2022-40151.html
@@ -35,11 +35,11 @@ <h2 id="reproduction">Steps to Reproduce</h2>
     following code snippet and unmarshal it with XStream:</p>
 <div class="Source Java"><pre>String xml = new String();
         int i = 0;
-        for( ; i &lt 10000; ++i) {
-            xml += "<set>";
+        for( ; i &lt; 10000; ++i) {
+            xml += "&lt;set&gt;";
         }
-        for( ; i > 0; --i) {
-            xml += "</set>";
+        for( ; i &gt; 0; --i) {
+            xml += "&lt;/set&gt;";
         }
 </pre></div>
 <div class="Source Java"><pre>XStream xstream = new XStream();