how to prevent ldap injection

See more:

C#3.5

Hi All,

I have ldap injection issue in below code. I need to perform whitelist based validation for all the inputs to resolve this issue.

can any one help me, how to validate this four parameters.

inputs are string and string[].




DirectoryEntry entry = server.GetSearchRoot(uri.DistinguishedName);


using (DirectorySearcher searcher = new DirectorySearcher(entry, uri.Filter, uri.AttributeNames, uri.Scope))
{
return server.ExecuteBestEffortSearch(searcher);