Skip to content

Commit dea105b

Browse files
committed
WIP: More link fixes, rewording
1 parent 970cee7 commit dea105b

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

system/doc/design_principles/secure_coding.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -954,8 +954,8 @@ B = ets:lookup(registered_table, KeyB).
954954
#### [`DSG-011`] - Only Deserialize Trusted Data
955955
[`DSG-011`]: #rule-dsg-011
956956

957-
There exist a variety of functionality in Erlang/OTP that serialize general
958-
Erlang terms. Such functionality is intended to be used in a trusted
957+
Erlang/OTP provides various functionality that serializes and deserializes
958+
general Erlang terms. Such functionality is intended to be used in a trusted
959959
environment and is not suitable for communication with untrusted entities. For
960960
example, you do not want to load a [`mnesia`] backup from an untrusted entity.
961961
One issue with this being the potential for atom exhaustion, but more
@@ -1247,7 +1247,7 @@ Related CWEs and OWASP risks: [CWE-242], [CWE-489], [`A06:2025`]
12471247

12481248
| Unsafe functionality | Alternative functionality | Note |
12491249
|:-------------------------------------------|:--------------------------------------------------------------------|:----------------------------------------------|
1250-
| Undocumented functions/functionality | *Only* use documented and supported functionality | See [Undocumented Functions/Functionality] |
1250+
| Undocumented functions/functionality | *Only* use documented and supported functionality | See [`DSG-004`] |
12511251
| [`open_port/2`] with `{spawn, _}` argument | [`open_port/2`] with `{spawn_executable\|spawn_driver, _}` argument | See [`MSC-003`] |
12521252
| `m:http_uri` module | `m:uri_string` module | |
12531253
| `crypto:start/0` | `application:start(crypto)` | See [Initializing `crypto`] |
@@ -1307,7 +1307,7 @@ Related CWEs and OWASP risks: [CWE-242], [CWE-489], [`A06:2025`]
13071307
| `ssl:prf/5` | `ssl:export_key_materials/4` | |
13081308
| `ssl:prf/5` | `ssl:export_key_materials/4` | |
13091309
| `ssl:prf/5` | `ssl:export_key_materials/4` | |
1310-
| Deprecated functionality | | See [Deprecated Functionality] |
1310+
| Deprecated functionality | | See [`DSG-005`] |
13111311

13121312
[`binary_to_atom/1`]: `erlang:binary_to_atom/1`
13131313
[`binary_to_atom/2`]: `erlang:binary_to_atom/2`
@@ -1761,8 +1761,8 @@ Erlang/OTP, covering both the [CWE Top 25] and the [On The Cusp] list.
17611761

17621762
[CWE-312]: https://cwe.mitre.org/data/definitions/312.html
17631763

1764-
## OWASP Top 10
17651764
[](){: #owasp-top-10 }
1765+
## OWASP Top 10
17661766
[OWASP Top 10]: #owasp-top-10
17671767

17681768
This section comments on the [top ten security risks] as catalogued by [OWASP].
@@ -1884,8 +1884,8 @@ these risks.
18841884

18851885
[A10:2025]: https://owasp.org/Top10/2025/A10_2025-Mishandling_of_Exceptional_Conditions/
18861886

1887-
## OWASP API Security Top 10
18881887
[](){: #owasp-api-top-10 }
1888+
## OWASP API Security Top 10
18891889
[OWASP API Security Top 10]: #owasp-api-top-10
18901890

18911891
This section comments on the [top ten API security risks] as catalogued by

0 commit comments

Comments
 (0)