Skip to content

Commit 3878192

Browse files
Apply suggestions from documentation review
Co-authored-by: Ben Ahmady <[email protected]>
1 parent 9130603 commit 3878192

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

java/ql/src/Security/CWE/CWE-200/AndroidSensitiveTextField.qhelp

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,13 +11,13 @@
1111
<recommendation>
1212
<p>
1313
For editable text fields containing sensitive information, the <code>inputType</code> should be set to <code>textPassword</code> or similar to ensure it is properly masked.
14-
Otherwise, sensitive data that is required to be displayed should be hidden by default, and only revealed based on an explicit user action.
14+
Otherwise, sensitive data that must be displayed should be hidden by default, and only revealed based on an explicit user action.
1515
</p>
1616
</recommendation>
1717

1818
<example>
1919
<p>
20-
In the following (bad) case, sensitive information <code>password</code> is exposed to the <code>TextView</code>.
20+
In the following (bad) case, sensitive information in <code>password</code> is exposed to the <code>TextView</code>.
2121
</p>
2222

2323
<sample src="AndroidSensitiveTextBad.java"/>

0 commit comments

Comments
 (0)