hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse Source 
Co-authored-by: Felicity Chapman <felicitymay@github.com>
This commit is contained in:
Esben Sparre Andreasen
2020-08-26 20:18:54 +02:00
committed by GitHub
parent 89305865d0
commit d27442e846
4 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/Security/CWE-116/IncompleteHtmlAttributeSanitization.qhelp
View File

@@ -41,7 +41,7 @@
<p>
An even safer alternative is to design the application
such that sanitization isn't needed at all, for instance by using HTML
so that sanitization is not needed, for instance by using HTML
templates that are explicit about the values they treat as HTML.
</p>

4
javascript/ql/src/Security/CWE-116/IncompleteSanitization.qhelp
View File

@@ -34,8 +34,8 @@ likely to handle corner cases correctly than a custom implementation.
<p>
An even safer alternative is to design the application such that sanitization isn't
needed at all, for instance by using prepared statements for SQL queries.
An even safer alternative is to design the application so that sanitization is not
needed, for instance by using prepared statements for SQL queries.
</p>

2
javascript/ql/src/Security/CWE-116/UnsafeHtmlExpansion.qhelp
View File

@@ -32,7 +32,7 @@
<p>
An even safer alternative is to design the application
such that sanitization isn't needed at all, for instance by using HTML
so that sanitization is not needed, for instance by using HTML
templates that are explicit about the values they treat as HTML.
</p>

4
javascript/ql/src/Security/CWE-843/TypeConfusionThroughParameterTampering.qhelp
View File

@@ -38,8 +38,8 @@
<p>
An even safer alternative is to design the application such that sanitization isn't
needed at all, for instance by using prepared statements for SQL queries.
An even safer alternative is to design the application so that sanitization is not
needed, for instance by using prepared statements for SQL queries.
</p>