File tree Expand file tree Collapse file tree 2 files changed +4
-4
lines changed
java/ql/src/Security/CWE/CWE-552 Expand file tree Collapse file tree 2 files changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -11,9 +11,9 @@ can cause file information disclosure by allowing an attacker to access unauthor
11
11
</overview >
12
12
<recommendation >
13
13
14
- <p >To guard against untrusted URL forwarding, it is advisable to avoid putting user input
15
- directly into a forwarded URL. Instead, maintain a list of authorized
16
- URLs on the server; then choose from that list based on the user input provided.</p >
14
+ <p >To guard against untrusted URL forwarding, you should avoid putting user input
15
+ directly into a forwarded URL. Instead, you should maintain a list of authorized
16
+ URLs on the server, then choose from that list based on the user input provided.</p >
17
17
18
18
</recommendation >
19
19
<example >
Original file line number Diff line number Diff line change 1
1
/**
2
2
* @name URL forward from a remote source
3
- * @description URL forward based on unvalidated user- input
3
+ * @description URL forward based on unvalidated user input
4
4
* may cause file information disclosure.
5
5
* @kind path-problem
6
6
* @problem.severity error
You can’t perform that action at this time.
0 commit comments