File tree Expand file tree Collapse file tree 2 files changed +4
-4
lines changed
java/ql/src/Security/CWE/CWE-552 Expand file tree Collapse file tree 2 files changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -11,9 +11,9 @@ can cause file information disclosure by allowing an attacker to access unauthor
1111</overview >
1212<recommendation >
1313
14- <p >To guard against untrusted URL forwarding, it is advisable to avoid putting user input
15- directly into a forwarded URL. Instead, maintain a list of authorized
16- URLs on the server; then choose from that list based on the user input provided.</p >
14+ <p >To guard against untrusted URL forwarding, you should avoid putting user input
15+ directly into a forwarded URL. Instead, you should maintain a list of authorized
16+ URLs on the server, then choose from that list based on the user input provided.</p >
1717
1818</recommendation >
1919<example >
Original file line number Diff line number Diff line change 11/**
22 * @name URL forward from a remote source
3- * @description URL forward based on unvalidated user- input
3+ * @description URL forward based on unvalidated user input
44 * may cause file information disclosure.
55 * @kind path-problem
66 * @problem.severity error
You can’t perform that action at this time.
0 commit comments