From a717bf1b9ded12c9804b463160c601afda830ece Mon Sep 17 00:00:00 2001 From: Sim4n6 Date: Wed, 13 Mar 2024 11:04:15 +0000 Subject: [PATCH] Fix p tag in UnicodeDoS.qhelp --- python/ql/src/experimental/Security/CWE-770/UnicodeDoS.qhelp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/ql/src/experimental/Security/CWE-770/UnicodeDoS.qhelp b/python/ql/src/experimental/Security/CWE-770/UnicodeDoS.qhelp index 53a19e9bca3..9b8fea3cad1 100644 --- a/python/ql/src/experimental/Security/CWE-770/UnicodeDoS.qhelp +++ b/python/ql/src/experimental/Security/CWE-770/UnicodeDoS.qhelp @@ -6,7 +6,7 @@

When a remote user-controlled data can reach a costly Unicode normalization with either form, NFKC or NFKD, an attack such as the One Million Unicode Characters, could lead to a denial of service on Windows OS.

-

And, with the use of special Unicode characters, like U+2100 (℀) or U+2105 (℅), the payload size could be tripled after the compatibility normalization. +

And, with the use of special Unicode characters, like U+2100 (℀) or U+2105 (℅), the payload size could be tripled after the compatibility normalization.