diff --git a/javascript/ql/src/Security/CWE-116/IncompleteMultiCharacterSanitization.qhelp b/javascript/ql/src/Security/CWE-116/IncompleteMultiCharacterSanitization.qhelp index 23ea040d1e1..f0c5a2fcf3f 100644 --- a/javascript/ql/src/Security/CWE-116/IncompleteMultiCharacterSanitization.qhelp +++ b/javascript/ql/src/Security/CWE-116/IncompleteMultiCharacterSanitization.qhelp @@ -25,7 +25,7 @@ possible. These libraries are more likely to handle corner cases and ensure effe
If a library is not an option, you can consider alternative strategies to fix the issue. For example, -applying the regular expression replacement repeatedly until no more replacements can be performed or to rewrite the regular +applying the regular expression replacement repeatedly until no more replacements can be performed, or rewriting the regular expression to match single characters instead of the entire unsafe text.