From d6027267aaeda10673ad3f7433b9e1085dbb0dce Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jaroslav=20Loba=C4=8Devski?= Date: Mon, 12 Aug 2024 09:31:58 +0000 Subject: [PATCH] fix variable name --- ql/src/Security/CWE-077/EnvPathInjectionCritical.md | 2 +- ql/src/Security/CWE-077/EnvPathInjectionMedium.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/ql/src/Security/CWE-077/EnvPathInjectionCritical.md b/ql/src/Security/CWE-077/EnvPathInjectionCritical.md index 436cf685996..36622d127d8 100644 --- a/ql/src/Security/CWE-077/EnvPathInjectionCritical.md +++ b/ql/src/Security/CWE-077/EnvPathInjectionCritical.md @@ -20,7 +20,7 @@ Do not allow untrusted data to influence the system PATH: Avoid using untrusted ### Incorrect Usage -Consider the following basic setup where an environment variable `MYVAR` is set and used in different steps: +Consider the following basic setup where an environment variable `PATH` is set: ```yaml steps: diff --git a/ql/src/Security/CWE-077/EnvPathInjectionMedium.md b/ql/src/Security/CWE-077/EnvPathInjectionMedium.md index 436cf685996..36622d127d8 100644 --- a/ql/src/Security/CWE-077/EnvPathInjectionMedium.md +++ b/ql/src/Security/CWE-077/EnvPathInjectionMedium.md @@ -20,7 +20,7 @@ Do not allow untrusted data to influence the system PATH: Avoid using untrusted ### Incorrect Usage -Consider the following basic setup where an environment variable `MYVAR` is set and used in different steps: +Consider the following basic setup where an environment variable `PATH` is set: ```yaml steps: