Skip to content

Commit f0c6b04

Browse files
committed
fix acrolinx
1 parent 63b5388 commit f0c6b04

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/machine-learning/concept-secure-code-best-practice.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -21,12 +21,12 @@ In Azure Machine Learning, you can upload files and content from any source into
2121
2222
## Potential threats
2323

24-
Development with Azure Machine Learning often involves web-based development environments (Notebooks & Azure Machine Learning studio). When using web-based development environments, the potential threats are:
24+
Development with Azure Machine Learning often involves web-based development environments (Notebooks & Azure Machine Learning studio). When you use web-based development environments, the potential threats are:
2525

2626
* [Cross site scripting (XSS)](https://owasp.org/www-community/attacks/xss/)
2727

2828
* __DOM injection__: This type of attack can modify the UI displayed in the browser. For example, by changing how the run button behaves in a Jupyter Notebook.
29-
* __Access token/cookies__: XSS attacks can also access local storage and browser cookies. Your Azure Active Directory (AAD) authentication token is stored in local storage. An XSS attack could use this token to make API calls on your behalf, and then send the data to an external system or API.
29+
* __Access token/cookies__: XSS attacks can also access local storage and browser cookies. Your Azure Active Directory (Azure AD) authentication token is stored in local storage. An XSS attack could use this token to make API calls on your behalf, and then send the data to an external system or API.
3030

3131
* [Cross site request forgery (CSRF)](https://owasp.org/www-community/attacks/csrf): This attack may replace the URL of an image or link with the URL of a malicious script or API. When the image is loaded, or link clicked, a call is made to the URL.
3232

@@ -49,7 +49,7 @@ __Recommended actions__:
4949

5050
## Azure Machine Learning compute instance
5151

52-
Azure Machine Learning compute instance hosts __Jupyter__ and __Jupyter Lab__. When using either, cells in a notebook or code in can output HTML documents or fragments that contain malicious code. When the output is rendered, the code can be executed. The same threats also apply when using __RStudio__ and __Posit Workbench (formerly RStudio Workbench)__ hosted on a compute instance.
52+
Azure Machine Learning compute instance hosts __Jupyter__ and __Jupyter Lab__. When you use either, cells in a notebook or code in can output HTML documents or fragments that contain malicious code. When the output is rendered, the code can be executed. The same threats also apply when you use __RStudio__ and __Posit Workbench (formerly RStudio Workbench)__ hosted on a compute instance.
5353

5454
__Possible threats__:
5555
* Cross site scripting (XSS)

0 commit comments

Comments
 (0)