Skip to content

Commit 5a77dfb

Browse files
authored
Merge pull request github#12905 from geoffw0/webviewdoc
Swift: Doc review for swift/unsafe-webview-fetch
2 parents 9ded5b8 + 507bb61 commit 5a77dfb

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

swift/ql/src/queries/Security/CWE-079/UnsafeWebViewFetch.qhelp

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,8 @@
33
"qhelp.dtd">
44
<qhelp>
55
<overview>
6-
<p>Fetching data in a WebView without restricting the base URL may allow an attacker to access sensitive local data, for example using <code>file://</code>. Data can then be extracted from the software using the URL of a machine under the attackers control. More generally, an attacker may use a URL under their control as part of a cross-site scripting attack.</p>
6+
7+
<p>Fetching data in a web view without restricting the base URL may allow an attacker to access sensitive local data, for example using <code>file://</code>. Data can then be extracted from the software using the URL of a machine under the attacker's control. More generally, an attacker may use a URL under their control as part of a cross-site scripting attack.</p>
78

89
</overview>
910
<recommendation>
@@ -25,7 +26,7 @@
2526
<references>
2627

2728
<li>
28-
<a href="https://www.allysonomalley.com/2018/12/03/ios-bug-hunting-web-view-xss/">iOS Bug Hunting - Web View XSS</a>
29+
<a href="https://www.allysonomalley.com/2018/12/03/ios-bug-hunting-web-view-xss/">iOS Bug Hunting - Web View XSS</a>.
2930
</li>
3031

3132
</references>

0 commit comments

Comments
 (0)