Skip to content

Commit 9f54b10

Browse files
atorralbamchammer01
andcommitted
Apply suggestions from code review
Co-authored-by: mc <[email protected]>
1 parent 9c10211 commit 9f54b10

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,2 @@
11
lgtm,codescanning
2-
* The query "Insecure JavaMail SSL Configuration" (`java/insecure-smtp-ssl`) has been promoted from experimental to the main query pack. Its results will now appear by default. This query was originally [submitted as an experimental query by @luchua-bc](https://github.com/github/codeql/pull/3491)
2+
* The query "Insecure JavaMail SSL Configuration" (`java/insecure-smtp-ssl`) has been promoted from experimental to the main query pack. Its results will now appear by default. This query was originally [submitted as an experimental query by @luchua-bc](https://github.com/github/codeql/pull/3491).

java/ql/src/Security/CWE/CWE-297/InsecureJavaMail.ql

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
/**
22
* @name Insecure JavaMail SSL Configuration
3-
* @description Java application configured to use authenticated mail session
4-
* over SSL does not validate the SSL certificate to properly
5-
* ensure that it is actually associated with that host.
3+
* @description Configuring a Java application to use authenticated mail session
4+
* over SSL without certificate validation
5+
* makes the session susceptible to a man-in-the-middle attack.
66
* @kind problem
77
* @problem.severity warning
88
* @precision medium

0 commit comments

Comments
 (0)