From ebd38eaf3bd0d5f4cb15bf4724fb2bb90ad1f8a6 Mon Sep 17 00:00:00 2001 From: haby0 Date: Sat, 10 Apr 2021 04:22:08 +0800 Subject: [PATCH] Update java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjection.qhelp Co-authored-by: Chris Smowton --- .../src/experimental/Security/CWE/CWE-352/JsonpInjection.qhelp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjection.qhelp b/java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjection.qhelp index f4910008902..e3d61a0342e 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjection.qhelp +++ b/java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjection.qhelp @@ -14,7 +14,7 @@ When there is a cross-domain problem, this could lead to information leakage.

-

The following examples show the bad case and the good case respectively. Bad case, such as bad1 to bad8, +

The following examples show the bad case and the good case respectively. Bad cases, such as bad1 to bad8, will cause information leakage problems when there are cross-domain problems. In a good case, for example, in the good1 method and the good2 method, use the verifToken method to do the random token Verification can solve the problem of information leakage caused by cross-domain.