mirror of
https://github.com/github/codeql.git
synced 2026-04-27 01:35:13 +02:00
Merge branch 'master' of github.com:monkey-junkie/codeql
This commit is contained in:
@@ -5,7 +5,7 @@
|
||||
|
||||
<overview>
|
||||
<p>
|
||||
Server Side Template Injection vulnerabilities occur when user input is embedded
|
||||
Server-Side Template Injection vulnerabilities occur when user input is embedded
|
||||
in a template in an unsafe manner allowing attackers to access the template context and
|
||||
run arbitrary code on the application server.
|
||||
</p>
|
||||
@@ -21,7 +21,7 @@ render engine with sandbox options.
|
||||
|
||||
<example>
|
||||
<p>
|
||||
The following example shows html page being rendered with user input allowing attackers to access the
|
||||
The following example shows a page being rendered with user input allowing attackers to access the
|
||||
template context and run arbitrary code on the application server.
|
||||
</p>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user