Skip to content

Commit c7e1df5

Browse files
Update java/ql/src/Security/CWE/CWE-927/ImplicitPendingIntents.qhelp
Co-authored-by: Felicity Chapman <[email protected]>
1 parent 3f6e035 commit c7e1df5

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

java/ql/src/Security/CWE/CWE-927/ImplicitPendingIntents.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@
2727
<recommendation>
2828
<p>Avoid creating implicit <code>PendingIntent</code>s. This means that the underlying <code>Intent</code> should always have an
2929
explicit destination component.</p>
30-
<p>Also, when adding the <code>PendingIntent</code> as an extra of another <code>Intent</code>, make sure that said <code>Intent</code> also has
30+
<p>When you add the <code>PendingIntent</code> as an extra of another <code>Intent</code>, make sure that this second <code>Intent</code> also has
3131
an explicit destination component, so that it is not delivered to untrusted applications.</p>
3232
<p>Create the <code>PendingIntent</code> using the flag <code>FLAG_IMMUTABLE</code> whenever possible,
3333
to prevent the destination component from modifying empty fields of the underlying <code>Intent</code>.</p>

0 commit comments

Comments
 (0)