Skip to content

Commit 4997f36

Browse files
Apply suggestions from code review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
1 parent 3141fda commit 4997f36

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

java/ql/src/Security/CWE/CWE-094/TemplateInjection.qhelp

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -21,12 +21,12 @@ This can lead to remote code execution.
2121
<sample src="SSTIBad.java" />
2222

2323
<p>
24-
In the next example the problem is avoided by using a fixed template string <code>s</code>.
25-
Since the template's code is not attacker-controlled in this case, the untrusted code execution is prevented.
24+
In the next example, the problem is avoided by using a fixed template string <code>s</code>.
25+
Since the template's code is not attacker-controlled in this case, this solution prevents the execution of untrusted code.
2626
</p>
2727
<sample src="SSTIGood.java" />
2828
</example>
2929
<references>
30-
<li>Portswigger: <a href="https://portswigger.net/web-security/server-side-template-injection">Server Side Template Injection</a></li>
30+
<li>Portswigger: <a href="https://portswigger.net/web-security/server-side-template-injection">Server Side Template Injection</a>.</li>
3131
</references>
3232
</qhelp>

0 commit comments

Comments
 (0)