Skip to content

Commit 0a986ad

Browse files
authored
Update JndiInjection.qhelp
Improve negation
1 parent 8f1ecf5 commit 0a986ad

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

java/ql/src/Security/CWE/CWE-074/JndiInjection.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ code execution.</p>
1111
</overview>
1212

1313
<recommendation>
14-
<p>The general recommendation is to not pass untrusted data to the <code>InitialContext.lookup
14+
<p>The general recommendation is to avoid passing untrusted data to the <code>InitialContext.lookup
1515
</code> method. If the name being used to look up the object must be provided by the user, make
1616
sure that it's not in the form of an absolute URL or that it's the URL pointing to a trused server.
1717
</p>

0 commit comments

Comments
 (0)