For findings with mitigation proposals in TSRV format, the command output appears as:
\rTechnique : M1 : Establish and maintain control over all of your inputs.\r\nSpecifics : We are using an encoder for our input.\r\nRemaining Risk : None.\r\nVerification : We must decline, for secret reasons.
Each component is separated by a carriage return and the line feed \r\n
. Processing the comment and separating at the \r\n
provides these items:
- Technique : M1 : Establish and maintain control over all of your inputs
- Specifics : We are using an encoder for our input.
- Remaining Risk : None.
- Verification : We must decline, for secret reasons.
Note: These comments are only examples. Veracode does not recommend offering any of these comments in your mitigations.