We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 4997f36 commit 4af29e6Copy full SHA for 4af29e6
java/ql/src/Security/CWE/CWE-094/TemplateInjection.qhelp
@@ -2,7 +2,7 @@
2
<qhelp>
3
<overview>
4
<p>
5
-Template Injection occurs when user input is embedded in a template's code in an unsafe manner.
+Template injection occurs when user input is embedded in a template's code in an unsafe manner.
6
An attacker can use native template syntax to inject a malicious payload into a template, which is then executed server-side.
7
This permits the attacker to run arbitrary code in the server's context.
8
</p>
0 commit comments