hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Documentation fixes

Browse Source
This commit is contained in:
Ed Minnix
2023-07-25 21:11:49 -04:00
parent b567ec875a
commit 172b8a6967
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/src/Security/CWE/CWE-501/TrustBoundaryViolation.qhelp
View File

@@ -30,12 +30,12 @@
<p>
In the first (bad) example, the server accepts a parameter from the user and uses it to set the username without validation.
</p>
<sample src="examples/TrustBoundaryVulnerable.java" />
<sample src="TrustBoundaryVulnerable.java" />
<p>
In the second (good) example, the server validates the parameter before using it to set the username.
</p>
<sample src="examples/TrustBoundaryFixed.java" />
<sample src="TrustBoundaryFixed.java" />
</example>