Skip to content

Commit 2f8c4df

Browse files
jcogs33subatoi
andauthored
docs wording updates
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
1 parent 40c932a commit 2f8c4df

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

java/ql/src/Security/CWE/CWE-552/UrlForward.qhelp

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,9 +11,9 @@ can cause file information disclosure by allowing an attacker to access unauthor
1111
</overview>
1212
<recommendation>
1313

14-
<p>To guard against untrusted URL forwarding, it is advisable to avoid putting user input
15-
directly into a forwarded URL. Instead, maintain a list of authorized
16-
URLs on the server; then choose from that list based on the user input provided.</p>
14+
<p>To guard against untrusted URL forwarding, you should avoid putting user input
15+
directly into a forwarded URL. Instead, you should maintain a list of authorized
16+
URLs on the server, then choose from that list based on the user input provided.</p>
1717

1818
</recommendation>
1919
<example>

java/ql/src/Security/CWE/CWE-552/UrlForward.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
22
* @name URL forward from a remote source
3-
* @description URL forward based on unvalidated user-input
3+
* @description URL forward based on unvalidated user input
44
* may cause file information disclosure.
55
* @kind path-problem
66
* @problem.severity error

0 commit comments

Comments
 (0)