diff --git a/java/ql/src/Security/CWE/CWE-074/JndiInjection.qhelp b/java/ql/src/Security/CWE/CWE-074/JndiInjection.qhelp index b3d1da82fa5..6e3739fafdf 100644 --- a/java/ql/src/Security/CWE/CWE-074/JndiInjection.qhelp +++ b/java/ql/src/Security/CWE/CWE-074/JndiInjection.qhelp @@ -13,7 +13,7 @@ code execution.
The general recommendation is to avoid passing untrusted data to the InitialContext.lookup
method. If the name being used to look up the object must be provided by the user, make
-sure that it's not in the form of an absolute URL or that it's the URL pointing to a trused server.
+sure that it's not in the form of an absolute URL or that it's the URL pointing to a trusted server.