diff --git a/ql/src/Security/CWE-117/LogInjection.qhelp b/ql/src/Security/CWE-117/LogInjection.qhelp index 23ac820b0db..31a05e6faa1 100644 --- a/ql/src/Security/CWE-117/LogInjection.qhelp +++ b/ql/src/Security/CWE-117/LogInjection.qhelp @@ -9,7 +9,7 @@ be able to forge new log entries.

Forgery can occur if a user provides some input with characters that are interpreted when the log output is displayed. If the log is displayed as a plain text file, then new line characters can be used by a malicious user. If the log is displayed as HTML, then -arbitrary HTML may be include to spoof log entries.

+arbitrary HTML may be included to spoof log entries.