From 879d882fa48d15ca5b323603dcb201effe656b5c Mon Sep 17 00:00:00 2001 From: Erik Krogh Kristensen Date: Tue, 6 Feb 2024 15:17:30 +0100 Subject: [PATCH] Java: fix typo in JndiInjection.qhelp --- java/ql/src/Security/CWE/CWE-074/JndiInjection.qhelp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/java/ql/src/Security/CWE/CWE-074/JndiInjection.qhelp b/java/ql/src/Security/CWE/CWE-074/JndiInjection.qhelp index b3d1da82fa5..6e3739fafdf 100644 --- a/java/ql/src/Security/CWE/CWE-074/JndiInjection.qhelp +++ b/java/ql/src/Security/CWE/CWE-074/JndiInjection.qhelp @@ -13,7 +13,7 @@ code execution.

The general recommendation is to avoid passing untrusted data to the InitialContext.lookup method. If the name being used to look up the object must be provided by the user, make -sure that it's not in the form of an absolute URL or that it's the URL pointing to a trused server. +sure that it's not in the form of an absolute URL or that it's the URL pointing to a trusted server.