From 0c6ace350fd8c17afdba1a1fc957d75a143d0c4e Mon Sep 17 00:00:00 2001 From: Tony Torralba Date: Mon, 19 Dec 2022 16:24:39 +0100 Subject: [PATCH] Update java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning.ql Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com> --- .../Security/CWE/CWE-295/AndroidMissingCertificatePinning.ql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning.ql b/java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning.ql index d27267fc02c..d42f956fc3d 100644 --- a/java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning.ql +++ b/java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning.ql @@ -1,6 +1,6 @@ /** * @name Android missing certificate pinning - * @description Network connections that do not use certificate pinning may allow attackers to eavesdrop communications. + * @description Network connections that do not use certificate pinning may allow attackers to eavesdrop on communications. * @kind problem * @problem.severity warning * @security-severity 5.9