File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
java/ql/src/Security/CWE/CWE-094 Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -21,12 +21,12 @@ This can lead to remote code execution.
21
21
<sample src =" SSTIBad.java" />
22
22
23
23
<p >
24
- In the next example the problem is avoided by using a fixed template string <code >s</code >.
25
- Since the template's code is not attacker-controlled in this case, the untrusted code execution is prevented .
24
+ In the next example, the problem is avoided by using a fixed template string <code >s</code >.
25
+ Since the template's code is not attacker-controlled in this case, this solution prevents the execution of untrusted code .
26
26
</p >
27
27
<sample src =" SSTIGood.java" />
28
28
</example >
29
29
<references >
30
- <li >Portswigger: <a href =" https://portswigger.net/web-security/server-side-template-injection" >Server Side Template Injection</a ></li >
30
+ <li >Portswigger: <a href =" https://portswigger.net/web-security/server-side-template-injection" >Server Side Template Injection</a >. </li >
31
31
</references >
32
32
</qhelp >
You can’t perform that action at this time.
0 commit comments