From a6970638cb6ef50581c76dfb025ce2ad69a4d3b4 Mon Sep 17 00:00:00 2001 From: Chris Smowton Date: Wed, 13 Jul 2022 20:27:10 +0100 Subject: [PATCH] Improve description --- java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.ql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.ql b/java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.ql index a6588bf195c..1caacbe8f2b 100644 --- a/java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.ql +++ b/java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.ql @@ -1,6 +1,6 @@ /** * @name Partial Path Traversal Vulnerability - * @description A misuse of the String `startsWith` method as a guard to protect against path traversal is insufficient. + * @description A prefix used to check that a canonicalised path falls within another must be slash-terminated. * @kind problem * @problem.severity error * @security-severity 9.3