hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #59 from tibbes/js/fix-qhelp-typo

Browse Source 
JS: fix typo in qhelp (parameter type confusion)
This commit is contained in:
Max Schaefer
2018-08-15 08:36:25 +01:00
committed by GitHub
parent 031964e853 5456ffb64c
commit 105b6c9d84
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/Security/CWE-843/TypeConfusionThroughParameterTampering.qhelp
View File

@@ -15,7 +15,7 @@
However, sanitizing request parameters assuming they have type
<code>String</code> and using the builtin string methods such as
<code>String.prototye.indexOf</code> is susceptible to type confusion
<code>String.prototype.indexOf</code> is susceptible to type confusion
attacks.
In a type confusion attack, an attacker tampers with an HTTP request