Skip to content

Commit 3d478a3

Browse files
committed
Ruby: clarify qhelp
1 parent 9fbd293 commit 3d478a3

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

ruby/ql/src/queries/security/cwe-598/SensitiveGetQuery.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
<qhelp>
33
<overview>
44
<p>
5-
Sensitive information such as user passwords should not be transmitted within the query string of the requested URL.
5+
Sensitive information such as passwords should not be transmitted within the query string of the requested URL.
66
Sensitive information within URLs may be logged in various locations, including the user's browser, the web server,
77
and any proxy servers between the two endpoints. URLs may also be displayed on-screen, bookmarked
88
or emailed around by users. They may be disclosed to third parties via the Referer header when any off-site links are

0 commit comments

Comments
 (0)