From 293dd1a32b4a757069ace51820ce3e0472db2257 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alvaro=20Mu=C3=B1oz?= Date: Fri, 23 Aug 2024 17:40:25 +0200 Subject: [PATCH] Update ArgumentInjectionCritical.md --- ql/src/Security/CWE-088/ArgumentInjectionCritical.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ql/src/Security/CWE-088/ArgumentInjectionCritical.md b/ql/src/Security/CWE-088/ArgumentInjectionCritical.md index 4957297be92..92e480e4a7a 100644 --- a/ql/src/Security/CWE-088/ArgumentInjectionCritical.md +++ b/ql/src/Security/CWE-088/ArgumentInjectionCritical.md @@ -31,7 +31,7 @@ jobs: cat file.txt | sed "s/BODY_PLACEHOLDER/$BODY/g" > replaced.txt ``` -An attacker may set the body of an Issue comment to `BAR|g;1e whoami;#` and the command `whoami` will get executed during the `sed` operation. +An attacker may set the body of an Issue comment to `BAR/g;1e whoami;#` and the command `whoami` will get executed during the `sed` operation. ## References