Skip to content

Commit da81230

Browse files
asgerfmchammer01
andauthored
Apply suggestions from doc review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
1 parent c336903 commit da81230

File tree

3 files changed

+5
-5
lines changed

3 files changed

+5
-5
lines changed

javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.qhelp

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -7,21 +7,21 @@
77
<p>
88
Using a case-sensitive regular expression path in a middleware route enables an attacker to bypass that middleware
99
when accessing an endpoint with a case-insensitive path.
10-
Paths specified using a string are case insensitive, whereas regular expressions are case sensitive by default.
10+
Paths specified using a string are case-insensitive, whereas regular expressions are case-sensitive by default.
1111
</p>
1212
</overview>
1313

1414
<recommendation>
1515
<p>
1616
When using a regular expression as a middleware path, make sure the regular expression is
17-
case insensitive by adding the <code>i</code> flag.
17+
case-insensitive by adding the <code>i</code> flag.
1818
</p>
1919
</recommendation>
2020

2121
<example>
2222
<p>
2323
The following example restricts access to paths in the <code>/admin</code> path to users logged in as
24-
an administrator:
24+
administrators:
2525
</p>
2626
<sample src="examples/CaseSensitiveMiddlewarePath.js" />
2727
<p>

javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
22
* @name Case-sensitive middleware path
3-
* @description Middleware with case-sensitive paths do not protect endpoints with case-insensitive paths
3+
* @description Middleware with case-sensitive paths do not protect endpoints with case-insensitive paths.
44
* @kind problem
55
* @problem.severity warning
66
* @security-severity 7.3

javascript/ql/src/change-notes/2022-06-27-case-sensitive-middleware.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,5 +2,5 @@
22
category: newQuery
33
---
44

5-
- A new query "case sensitive middleware path" (`js/case-sensitive-middleware-path`) has been added.
5+
- A new query "Case-sensitive middleware path" (`js/case-sensitive-middleware-path`) has been added.
66
It highlights middleware routes that can be bypassed due to having a case-sensitive regular expression path.

0 commit comments

Comments
 (0)