Skip to content

Commit e9f9e68

Browse files
Change man-in-the-middle back to machine-in-the-middle
(gender-neutral language) This reverts commit d5ab330.
1 parent 79b1f24 commit e9f9e68

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

java/ql/src/Security/CWE/CWE-295/ImproperWebViewCertificateValidation.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
<overview>
66
<p>
77
If the <code>onReceivedSslError</code> method of an Android <code>WebViewClient</code> always calls <code>proceed</code> on the given <code>SslErrorHandler</code>, it trusts any certificate.
8-
This allows an attacker to perform a man-in-the-middle attack against the application, therefore breaking any security Transport Layer Security (TLS) gives.
8+
This allows an attacker to perform a machine-in-the-middle attack against the application, therefore breaking any security Transport Layer Security (TLS) gives.
99
</p>
1010

1111
<p>

java/ql/src/Security/CWE/CWE-295/ImproperWebViewCertificateValidation.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
22
* @name Android `WebView` that accepts all certificates
3-
* @description Trusting all certificates allows an attacker to perform a man-in-the-middle attack.
3+
* @description Trusting all certificates allows an attacker to perform a machine-in-the-middle attack.
44
* @kind problem
55
* @problem.severity error
66
* @security-severity 7.5

0 commit comments

Comments
 (0)